User guide of MISP https://www.circl.lu/doc/misp/

Go to file

Alexandre Dulaunoy fb8439d6a5 chg: [types and categories] ssh-fingerprint added		2021-10-26 11:37:05 +02:00
administration	Merge pull request #253 from Wachizungu/add-correlation-exclusions	2021-03-24 22:21:35 +01:00
appendices	…
automation	chg: [automation] add /objects/delete	2021-03-07 23:18:57 +01:00
best-practices	…
book-convention	…
categories-and-types	chg: [types and categories] ssh-fingerprint added	2021-10-26 11:37:05 +02:00
connectors	…
create-event-report	…
delegation	…
dev-faq	…
extended-events	…
faq	…
galaxy	…
general-concepts	…
general-layout	…
get-your-instance	…
keyboard-shortcuts	…
managing-feeds	Fixing a typo	2021-03-09 12:22:43 +01:00
misp-objects	…
misp-zmq	…
modules	…
noticelists	…
pymisp	…
quick-start	…
requirements	…
sharing	chg: [sharing] update visibility of data to align with latest version	2021-03-24 18:44:11 +01:00
sightings	…
styles	…
taxonomy	…
translation	…
updating-python	fix: Python modules upgrade	2021-03-09 11:01:58 +01:00
user-management	…
user-personas	chg: [personas] minor fixes + some links added	2021-03-27 11:09:43 +01:00
user-stories	chg: [user-stories] add a reference to the feed overlap analysis	2021-03-27 11:12:14 +01:00
using-the-system	…
warninglists	…
.gitignore	…
.travis.yml	chg: [travis] atoc plugin added	2021-03-14 16:09:40 +01:00
GLOSSARY.md	…
README.md	Update README.md	2021-03-14 22:41:48 +01:00
SUMMARY.md	Merge branch 'main' into user-stories	2021-03-26 23:18:07 +01:00
USAGE.md	…
book.json	fix: [toc] using atoc (another unmaintained gitbook plugin)	2021-03-14 15:59:41 +01:00
cover.jpg	…
publish.sh	…
serve.sh	…

README.md

description
Introduction to MISP - Open Source Threat Intelligence Sharing Platform

Introduction

User guide for MISP - The Open Source Threat Intelligence Sharing Platform. This user guide is intended for ICT professionals such as security analysts, security incident handlers, or malware reverse engineers who share threat intelligence using MISP or integrate MISP into other security monitoring tools. The user guide includes day-to-day usage of the MISP's graphical user interface along with its automated interfaces API, in order to integrate MISP within a security environment and operate one or more MISP instances.

Acknowledgement

The MISP user guide is a collaborative effort between all the contributors to MISP including:

Belgian Ministry of Defence CERT
CIRCL Computer Incident Response Center Luxembourg
Iklody IT Solutions
NATO NCIRC
Cthulhu Solutions
CERT-EU

and many other contributors especially the ones during the MISP hackathons.

Contributing

We welcome contributions to the MISP book. If you want to contribute, fork the misp-book repository and pull a request with your changes. You can also open issues if you find any errors or propose changes.

Format

MISP book is available in HTML, PDF, ePub and Kindle mobi format.

License

The MISP user guide is dual-licensed under GNU Affero General Public License version 3 and CC-BY-SA 4.0 international.