misp-training/x.17-eu-attack-community/content.tex

% DO NOT COMPILE THIS FILE DIRECTLY!
% This is included by the other .tex files.

\begin{frame}
\titlepage
\end{frame}


\begin{frame}
  \frametitle{What is a MISP Galaxy?}
  \begin{itemize}
	  \item MISP Galaxy is a feature in MISP and a MISP standard\footnote{\url{https://www.misp-standard.org/}} format to create {\bf contextualization libraries}.
    \begin{itemize}
      \item There are two main types: \textbf{combined list} or \textbf{matrix-like list}.
    \end{itemize}
    \item The first historical matrix-like galaxy was MITRE ATT\&CK\footnote{Presented at the first EU ATT\&CK community meeting in Luxembourg}.
    \item Galaxies contain intelligence that can be \textbf{structured} in a matrix-like format. Relationships between models can be created, and implementation such as in MISP allows for the \textbf{forking and sharing of information}. This is typically attached to intelligence in threat intelligence platforms to add context.
  \end{itemize}
\end{frame}


\begin{frame}
	\frametitle{MISP galaxies over time}
	\begin{center}
	\includegraphics[scale=0.13]{./screenshots/timeline.png}
	\end{center}
\end{frame}


\begin{frame}
  \frametitle{Get in touch if you have any questions}
  \begin{itemize}
    \item MISP galaxy website \url{https://www.misp-galaxy.org/}
    \item Contact MISPProject 
    \begin{itemize}
      \item \url{https://github.com/MISP}
      \item \url{https://gitter.im/MISP/MISP}
      \item \url{https://twitter.com/MISPProject}
    \end{itemize}
  \end{itemize}
\end{frame}