diff --git a/README.md b/README.md index b0a409f..bf488fd 100644 --- a/README.md +++ b/README.md @@ -5,6 +5,9 @@ can be customised by the users. This repository contains all the default models. For more information about decaying and expiring attributes/indicators in MISP, the training materials [MISP and Decaying of Indicators](https://www.misp-project.org/misp-training/a.5-decaying-indicators.pdf) is a good start. +![Simulate decaying in MISP threat intelligence platform](https://www.misp-project.org/assets/images/misp/blog/decay.png) +![Overlay of decaying per model in the event/attribute view of MISP](https://www.misp-project.org/assets/images/misp/blog/decaying/dm-event.png) + ## Models - [nids-simple-model](./models/nids-simple-model.json) - Simple decaying model for Network Intrusion Detection System (NIDS).