User guide of MISP https://www.circl.lu/doc/misp/
 
 
 
Go to file
Jeroen Pinoy 0315c633bd chg: [Synchronisation] add internal instance syncing scenarios 2021-02-23 22:37:02 +01:00
administration chg: [Administration] close #198 - document publish alert filter valid filters 2021-02-20 23:31:32 +01:00
appendices Merge branch 'master' into patch-2 2020-08-19 15:42:22 +09:00
automation add: Documentation on Search query added 2020-05-26 17:40:01 +02:00
book-convention fix: [doc] Typo 2020-01-07 14:20:34 +09:00
categories-and-types chg: [types] updated 2021-02-21 07:36:06 +01:00
connectors Update README.md 2019-12-30 16:22:27 -08:00
create-event-report Editorial changes in README.md concerning Freetext Import option 2018-08-17 16:56:22 +02:00
delegation chg: fix #202 - clarify delegation of event design 2021-02-20 23:13:08 +01:00
dev-faq chg: [doc] Updated various aspects of the Book. Added dev-faq (mostly pointing to GH) 2018-11-17 19:30:59 +09:00
extended-events - Added place-holder information on exteended events, notice lists and warning lists 2018-05-14 11:06:15 +02:00
faq chg: [faq] Add FAQ question on setting baseurl via CLI 2021-02-19 23:50:12 +01:00
galaxy remove files 2020-03-02 14:23:02 +01:00
general-concepts fixed two typo 2020-07-01 18:23:30 +02:00
general-layout chg: [doc] First pass over the general layout chapter to check if everything is documented that is actually implemented as of MISP 2.4.95. Removed obsolete figures. 2018-09-07 19:11:14 +02:00
get-your-instance chg: [doc] Update the get your instance instructions to 2.4.95 2018-09-07 21:39:04 +02:00
managing-feeds chg: [managing-feeds] fix #206 2021-01-29 23:16:56 +01:00
misp-object update misp-object chapetr 2019-02-15 15:56:22 +01:00
misp-zmq chg: [ZeroMQ] Add host config param and modify language 2021-02-21 19:09:33 +01:00
modules chg: [doc] Added links to misp-modules installation 2019-04-29 09:37:13 +09:00
noticelist fix various typos in objects 2019-02-15 09:25:48 +01:00
noticelists chg: [doc] noticelists 2020-12-17 10:18:02 +09:00
pymisp chg: [doc] Added more visual examples for pymisp 2018-11-28 15:51:40 +09:00
quick-start chg: [doc] Added logo 2020-01-14 10:43:51 +09:00
requirements chg: [doc] Added ToC 2018-11-01 16:38:48 +09:00
sharing chg: [Synchronisation] add internal instance syncing scenarios 2021-02-23 22:37:02 +01:00
shortcuts Add documentation for shortcuts in MISP. 2018-02-06 10:24:54 -05:00
sightings typo 2018-06-24 16:10:50 -04:00
styles chg: [doc] Added logo 2020-01-14 10:43:51 +09:00
taxonomy chg: fix #141 - 404s found by old linkchecker run 2021-02-20 13:33:54 +01:00
translation chg: [doc] Updated various aspects of the Book. Added dev-faq (mostly pointing to GH) 2018-11-17 19:30:59 +09:00
updating-python chg: [python update] new title 2019-11-07 09:38:33 +01:00
user-management Update pages with password guideline 2018-04-11 18:00:46 +02:00
using-the-system chg: fix #141 - 404s found by old linkchecker run 2021-02-20 13:33:54 +01:00
warninglists chg: fix #141 - 404s found by old linkchecker run 2021-02-20 13:33:54 +01:00
.gitignore chg: [GI] Added more details to gitignore 2020-01-07 14:17:48 +09:00
.travis.yml chg: [tools] Added serve.sh in case gitbook --watch is broken 2018-09-07 15:09:41 +02:00
GLOSSARY.md chg: [doc] Update quickstart, added Local Tags to glossary. 2019-07-09 15:13:42 +09:00
README.md chg: [readme] MISP is a threat intelligence sharing platform 2021-02-21 09:27:50 +01:00
SUMMARY.md chg: [SUMMARY] updating python 2019-11-07 09:27:55 +01:00
USAGE.md chg: [doc] confirmed working on recent Debian distros. 2020-08-19 16:07:21 +09:00
book.json chg: [fix] Fixed fontsettings plugin. It must be before CSS invocations. 2018-11-28 15:20:13 +09:00
cover.jpg
publish.sh chg: [shell] Added vague indicators where we are at in the build process. 2018-11-27 18:04:26 +09:00
serve.sh chg: [tools] Added serve.sh in case gitbook --watch is broken 2018-09-07 15:09:41 +02:00

README.md

description
Introduction to MISP - Open Source Threat Intelligence Sharing Platform

Introduction

Build Status

MISP logo

User guide for MISP - The Open Source Threat Intelligence Sharing Platform. This user guide is intended for ICT professionals such as security analysts, security incident handlers, or malware reverse engineers who share threat intelligence using MISP or integrate MISP into other security monitoring tools. The user guide includes day-to-day usage of the MISP's graphical user interface along with its automated interfaces API, in order to integrate MISP within a security environment and operate one or more MISP instances.

Acknowledgement

The MISP user guide is a collaborative effort between all the contributors to MISP including:

and many other contributors especially the ones during the MISP hackathons.

Contributing

We welcome contributions to the MISP book. If you want to contribute, fork the misp-book repository and pull a request with your changes. You can also open issues if you find any errors or propose changes.

Format

MISP book is available in HTML, PDF, ePub and Kindle mobi format.

License

The MISP user guide is dual-licensed under GNU Affero General Public License version 3 and CC-BY-SA 4.0 international.

  • Copyright C 2012 Christophe Vandeplas
  • Copyright C 2012 Belgian Defence
  • Copyright C 2012 NATO / NCIRC
  • Copyright C 2013-2020 Andras Iklody
  • Copyright C 2015-2020 Alexandre Dulaunoy
  • Copyright C 2014-2020 CIRCL - Computer Incident Response Center Luxembourg
  • Copyright C 2018 Camille Schneider
  • Copyright C 2018-2020 Steve Clement