MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform) https://www.misp-project.org/
 
 
 
 
 
 
Go to file
deresz f388cdc04d Merge pull request #62 from elhoim/patch-2
Updated installation instructions for Mysql schema
2013-03-11 01:12:58 -07:00
INSTALL Updated installation instructions for Mysql schema 2013-03-10 12:51:29 +01:00
app first start of cleanup , setting license to AGPL 2013-02-15 09:23:19 +01:00
build CakePHP 2012-12-12 16:51:02 +01:00
plugins Logging in for REST using Authorized HTTP header field. 2012-04-06 16:32:33 +02:00
tools RESTfull sync 2012-12-11 16:11:45 +01:00
.gitignore cleanup of directory 2012-06-08 17:03:27 +02:00
BUGS.txt first start of cleanup , setting license to AGPL 2013-02-15 09:23:19 +01:00
COPYRIGHT first start of cleanup , setting license to AGPL 2013-02-15 09:23:19 +01:00
LICENSE first start of cleanup , setting license to AGPL 2013-02-15 09:23:19 +01:00
README.md corrected read me details about version 2013-02-15 09:26:51 +01:00

README.md

MISP - Malware Information Sharing Platform

Copyright: The copyright holders are the Belgian Defence and NATO / NCIRC. License: Affero General Public License v3

Goal

A huge challenge in the Cyber Security domain is the information sharing inside and between organizations. This platform has as goal to facilitate:

  • storing technical and non-technical information about seen malwares and attacks
  • automatically creating relations between malwares and events
  • storing data in a structured format (allowing automated use of the database for various purposes)
  • generating IDS rules that can be imported on IDS systems (network, host)
  • sharing the information with other parties and trust-groups
  • storing locally all information from other instances

To have a better idea what the platform does have a look at the PDF files in the INSTALL directory.

Documentation

Make sure you read the documentation in the INSTALL directory. We are currently consolidating the documentation, so it will be updated often.

This code is the first version of MISP. (previously known as CyDefSIG) Feel free to look at the develop branch to look the very new features that will come.