A dashboard for a real-time overview of threat intelligence from MISP instances
 
 
 
 
 
Go to file
Sami Mokaddem 4e396d2eb3 Added support of custom categories from config 2017-11-02 16:10:40 +01:00
config Added support of custom categories from config 2017-11-02 16:10:40 +01:00
static Added support of custom categories from config 2017-11-02 16:10:40 +01:00
templates Added support of custom categories from config 2017-11-02 16:10:40 +01:00
LICENSE
README.md
install_dependencies.sh Fixed leaflet markers pic 2017-10-30 09:55:50 +01:00
retreive_map_pic.py
server.py Added support of custom categories from config 2017-11-02 16:10:40 +01:00
start.sh
zmq_subscriber.py

README.md

MISP-Dashboard

A Dashboard showing live data and statistics from the MISP ZMQ

Installation

  • Launch ./install_dependencies.sh from the MISP-Dashboard directory
  • Update the configuration file config.cfg so that it matches your system
    • Fields that you may change:
      • RedisGlobal -> host
      • RedisGlobal -> port
      • RedisLog -> zmq_url
      • RedisMap -> pathMaxMindDB

Starting the System

  • Activate your virtualenv . ./DASHENV/bin/activate
  • Listen to the MISP feed by starting the zmq_subscriber ./zmq_subscriber.py
  • Start the Flask server ./server.py

zmq_subscriber options


A zmq subscriber. It subscribe to a ZMQ then redispatch it to the MISP-dashboard

optional arguments:
  -h, --help            show this help message and exit
  -n ZMQNAME, --name ZMQNAME
                        The ZMQ feed name
  -u ZMQURL, --url ZMQURL
                        The URL to connect to