From 80c4aaa78b6bf03df2766087d4084a8c2fa408bc Mon Sep 17 00:00:00 2001 From: Anders Einar Hilden Date: Fri, 29 Sep 2023 13:08:11 +0200 Subject: [PATCH] doc: Update README.md with new badges, toc, install tips --- README.md | 94 +++++++++++++++++++++++++++++++++---------------------- 1 file changed, 56 insertions(+), 38 deletions(-) diff --git a/README.md b/README.md index 2a28375fb..b98ff74a8 100644 --- a/README.md +++ b/README.md @@ -1,46 +1,53 @@ MISP - Threat Intelligence Sharing Platform ------------------------------------------- - -![logo](./INSTALL/logos/misp-logo.png?raw=true "MISP") - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Latest ReleaseGitHub version
CI Action
Gitter
Twitter
Localization
Contributors
License
+MISP logo MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and ICT professionals or malware reversers to support their day-to-day operations to share structured information efficiently. The objective of MISP is to foster the sharing of structured information within the security community and abroad. MISP provides functionalities to support the exchange of information but also the consumption of said information by Network Intrusion Detection Systems (NIDS), LIDS but also log analysis tools, SIEMs. -MISP, Malware Information Sharing Platform and Threat Sharing, core functionalities are: +   ●  Core functions +   ●  Website / Support +   ●  PHP and MISP
+   ●  Installation +   ●  Documentation +   ●  Contributing
+   ●  License + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Latest ReleaseGitHub version
CI
Gitter
Mastodon
Twitter
Localization
Contributors
License
+ +Core functions +------------------ - An **efficient IOC and indicators** database, allowing to store technical and non-technical information about malware samples, incidents, attackers and intelligence. - Automatic **correlation** finding relationships between attributes and indicators from malware, attack campaigns or analysis. The correlation engine includes correlation between attributes and more advanced correlations like Fuzzy hashing correlation (e.g. ssdeep) or CIDR block matching. Correlation can also be enabled or event disabled per attribute. - A **flexible data model** where complex [objects](https://www.misp-project.org/objects.html) can be expressed and **linked together to express threat intelligence, incidents or connected elements**. @@ -73,16 +80,27 @@ A sample event encoded in MISP: Website / Support ------------------ -Checkout the [website](https://www.misp-project.org) for more information about MISP software, standards, tools and communities. +Checkout the [website](https://www.misp-project.org) for more information about MISP software, standards, tools and communities. -Information, news and updates are also regularly posted on the [MISP project twitter account](https://twitter.com/MISPProject) or the [news page](https://www.misp-project.org/news/). +Information, news and updates are also regularly posted on the MISP project [Mastodon account](https://misp-community.org/@misp), [twitter account](https://twitter.com/MISPProject) and [news page](https://www.misp-project.org/news/). + +PHP and MISP +------------- +MISP currently **requires PHP 7.4**, an end-of-life version of PHP. Because of this it is recommended that you only run MISP on distributions or PHP installs that you know will get security fixes backported, like Red Hat or Debian and derratives. + +MISP 3.x, currently in development will support PHP 8.x. + + +Installation +------------- +For test- og production installations we recommend you check out the possible options on [misp-project.org/download](https://www.misp-project.org/download/). Documentation ------------- [MISP user-guide (MISP-book)](https://github.com/MISP/misp-book) is available [online](https://www.circl.lu/doc/misp/) or as [PDF](https://www.circl.lu/doc/misp/book.pdf) or as [EPUB](https://www.circl.lu/doc/misp/book.epub) or as [MOBI/Kindle](https://www.circl.lu/doc/misp/book.mobi). -For the installation guide see the [INSTALL](https://github.com/MISP/MISP/tree/2.4/INSTALL) or [download section](https://www.misp-project.org/download/). +It is also recommended to read the [FAQ](https://github.com/MISP/MISP/wiki/Frequently-Asked-Questions) Contributing ------------