Specifications used in the MISP project including MISP core format
 
 
 
Go to file
Alexandre Dulaunoy 9e7723878e
fix: clarification regarding published_timestamp
Following a discussion with @mokaddem @adulau and @iglocska
The clarification came because it was not clear in the RFC
about the value of the timestamp if the event was never published.
2018-03-08 09:44:19 +01:00
misp-core-format fix: clarification regarding published_timestamp 2018-03-08 09:44:19 +01:00
misp-galaxy-format Updated text output 2018-03-01 17:11:45 +01:00
misp-object-template-format ascii export updated 2017-09-21 15:59:55 +02:00
misp-taxonomy-format Clarification of the numerical range 2017-11-30 15:37:20 +01:00
README.md Latest version of Internet-Draft published for misp-galaxy 2018-03-01 20:44:19 +01:00

README.md

MISP standards

This repository is the official source of the specification and formats used in the MISP project.

The formats are described to support other implementations which reuse the format and ensuring an interoperability with existing MISP software and other Threat Intelligence Platforms.

All the formats can be freely reused by everyone.

MISP Formats in use and implemented in multiple software

MISP Format in design phase and implemented in at least one software prototype

  • misp-modules-protocol which describes the misp-modules protocol used between MISP and misp-modules.

MISP Format in design phase

  • misp-collaborative-voting-format which describes the collaborative voting and scoring format for the feeds providers.

Sample files

If you want to see how a threat intelligence can be easily expressed in MISP standard, the following resources might give you some ideas:

Installing MISP is also another option to see the MISP standards in action. The MISP standards are actively used in the MISP threat intelligence platform to support the complete chain from intelligence creation, sharing, distribution and synchronisation.

Contribution

If you want to contribute to the MISP specifications, feel free to open an issue.