MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform) https://www.misp-project.org/
 
 
 
 
 
 
Go to file
Alexandre Dulaunoy de6fc6f6ae Version 1.0 of MISP XML Document Type Definition.
The first version of the XML format is loosely based on the current XML
format used by MISP in commit 84b552fb74.

The purpose is to track down the changes in the format and especially
to ensure a consistent definition of the XML format for external tools
and software using the MISP XML format.
2013-07-29 11:37:09 +02:00
INSTALL Version 1.0 of MISP XML Document Type Definition. 2013-07-29 11:37:09 +02:00
app Fixes an issue with the upload of malware samples not generating an md5 2013-07-26 10:13:44 +02:00
plugins Merge branch 'feature/gui' of https://github.com/MISP/MISP into 2013-05-31 17:50:00 +02:00
tools minor changes 2013-06-24 15:12:30 +02:00
.gitignore updated gitignore 2013-04-16 22:09:03 +02:00
.pydevproject minor changes 2013-06-24 15:12:30 +02:00
BUGS.txt updated structure of the documentation 2013-02-15 08:20:14 +01:00
COPYRIGHT updated structure of the documentation 2013-02-15 08:20:14 +01:00
LICENSE updated structure of the documentation 2013-02-15 08:20:14 +01:00
README.md updated structure of the documentation 2013-02-15 08:20:14 +01:00

README.md

MISP - Malware Information Sharing Platform

Copyright: The copyright holders are the Belgian Defence and NATO / NCIRC. License: Affero General Public License v3

Goal

A huge challenge in the Cyber Security domain is the information sharing inside and between organizations. This platform has as goal to facilitate:

  • storing technical and non-technical information about seen malwares and attacks
  • automatically creating relations between malwares and events
  • storing data in a structured format (allowing automated use of the database for various purposes)
  • generating IDS rules that can be imported on IDS systems (network, host)
  • sharing the information with other parties and trust-groups
  • storing locally all information from other instances

To have a better idea what the platform does have a look at the PDF files in the INSTALL directory.

Documentation

Make sure you read the documentation in the INSTALL directory. We are currently consolidating the documentation, so it will be updated often.

This part of the code is a major rewrite of a first version of the codebase.