User guide of MISP https://www.circl.lu/doc/misp/
 
 
 
Go to file
Steve Clement cca70c0f3d chg: [doc] First pass over the general layout chapter to check if everything is documented that is actually implemented as of MISP 2.4.95. Removed obsolete figures.
chg: [doc] Update to convention of the book.
2018-09-07 19:11:14 +02:00
administration chg: [doc] Updated administration section 2018-09-07 16:10:47 +02:00
appendices Added the ACL query functions 2016-04-18 09:45:09 +02:00
automation Fix a simple typo 2018-06-28 15:59:06 +09:00
book-convention chg: [doc] First pass over the general layout chapter to check if everything is documented that is actually implemented as of MISP 2.4.95. Removed obsolete figures. 2018-09-07 19:11:14 +02:00
categories-and-types chg: [data-model] bro attribute type added 2018-08-28 21:12:08 +02:00
create-event-report Editorial changes in README.md concerning Freetext Import option 2018-08-17 16:56:22 +02:00
delegation Typo fixed 2017-03-30 12:02:23 +02:00
extended-events - Added place-holder information on exteended events, notice lists and warning lists 2018-05-14 11:06:15 +02:00
galaxy typos 2018-06-24 14:54:45 -04:00
general-concepts - Removed trailing spaces and fixed obvious typose 2018-02-02 12:12:16 +01:00
general-layout chg: [doc] First pass over the general layout chapter to check if everything is documented that is actually implemented as of MISP 2.4.95. Removed obsolete figures. 2018-09-07 19:11:14 +02:00
get-your-instance Information about VM updated to match the current VM setup 2017-12-07 16:23:43 +01:00
managing-feeds Merge pull request #52 from deralexxx/patch-5 2017-07-06 14:32:51 +02:00
misp-object update misp-object chapter 2017-11-07 13:56:53 +01:00
misp-zmq Added pyzmq 2018-05-22 07:42:21 +02:00
modules - Added place-holder information on exteended events, notice lists and warning lists 2018-05-14 11:06:15 +02:00
noticelists - Added place-holder information on exteended events, notice lists and warning lists 2018-05-14 11:06:15 +02:00
pymisp - Removed trailing spaces and fixed obvious typose 2018-02-02 12:11:56 +01:00
quick-start chg: [doc] Added quick sections in tl;dr 2018-09-06 09:04:38 +02:00
sharing fix: ISO 27010 example community visual exported to PNG 2018-04-08 16:12:32 +02:00
shortcuts Add documentation for shortcuts in MISP. 2018-02-06 10:24:54 -05:00
sightings typo 2018-06-24 16:10:50 -04:00
styles - Added possibility to make page-breaks, 2018-05-10 12:15:28 +09:00
taxonomy small typo fixed 2018-07-31 15:00:50 +02:00
translation - Better html tag example 2018-01-18 18:39:32 +01:00
user-management Update pages with password guideline 2018-04-11 18:00:46 +02:00
using-the-system add misp-object chapter 2017-11-06 16:40:59 +01:00
warninglists - Added place-holder information on exteended events, notice lists and warning lists 2018-05-14 11:06:15 +02:00
.gitignore user-management 2015-10-06 11:58:10 +02:00
.travis.yml chg: [tools] Added serve.sh in case gitbook --watch is broken 2018-09-07 15:09:41 +02:00
GLOSSARY.md chg: [doc] Updated administration section 2018-09-07 16:10:47 +02:00
README.md - Added possibility to make page-breaks, 2018-05-10 12:15:28 +09:00
SUMMARY.md - Added placeholders for undocumented features: extending events, misp-modules, notice lists, warning lists 2018-05-14 06:36:10 +02:00
USAGE.md chg: [doc] Updated administration section 2018-09-07 16:10:47 +02:00
book.json - Added image-class plugin to change the <div> of the images. 2018-05-14 11:03:34 +02:00
cover.jpg Cover added 2017-03-30 11:19:33 +02:00
publish.sh add: minimal publishing script 2017-08-25 07:15:26 +02:00
serve.sh chg: [tools] Added serve.sh in case gitbook --watch is broken 2018-09-07 15:09:41 +02:00

README.md

description
Introduction to MISP - Open Source Threat Intelligence Platform (previously known as Malware Information Sharing Platform)

Introduction

Build Status

MISP logo

User guide for MISP Malware Information Sharing Platform - An Open Source Threat Intelligence Sharing Platform. This user guide is intended for ICT professionals such as security analysts, security incident handlers, or malware reverse engineers who share threat indicators using MISP or integrate MISP into other security monitoring tools. The user guide includes day-to-day usage of the MISP's graphical user interface along with its automated interfaces API, in order to integrate MISP within a security environment.

Acknowledgement

The MISP user guide is a collaborative effort between all the contributors to MISP including:

and many other contributors especially the ones during the MISP hackathons.

Contributing

We welcome contributions to the MISP book. If you want to contribute, fork the misp-book repository and pull a request with your changes. You can also open issues if you find any errors or propose changes.

License

The MISP user guide is dual-licensed under GNU Affero General Public License version 3 and CC-BY-SA 4.0 international.

  • Copyright C 2012 Christophe Vandeplas
  • Copyright C 2012 Belgian Defence
  • Copyright C 2012 NATO / NCIRC
  • Copyright C 2013-2018 Andras Iklody
  • Copyright C 2015-2018 Alexandre Dulaunoy
  • Copyright C 2014-2018 CIRCL - Computer Incident Response Center Luxembourg
  • Copyright C 2018 Camille Schneider