Clusters and elements to attach to MISP events or attributes (like threat actors) https://www.misp-project.org/galaxy.html
 
 
 
 
Go to file
Alexandre Dulaunoy 4a831e2090 Karma panda added 2016-03-04 07:37:54 +01:00
cluster planning-and-operational-support-vocabulary added 2016-03-03 07:42:03 +01:00
elements Karma panda added 2016-03-04 07:37:54 +01:00
README.md The PlanningAndOperationalSupportVocab is the default STIX vocabulary 2016-03-03 07:38:49 +01:00

README.md

misp-galaxy

MISP galaxy is a simple method to express a large object called cluster that can be attached to MISP events or attributes. A cluster can be composed of one or more elements. Elements are expressed as key-values. There are default elements available in MISP galaxy but those can be overwritten, replaced or updated as you wish.

Existing clusters and elements can be used as-is or as a template. MISP distribution can be applied to each cluster to permit a limited or broader distribution scheme.

Available clusters

Available Elements

How to contribute?

Fork the project, update or create elements or clusters and make a pull-request.