diff --git a/20220615-NATO-MUG-UPDATE/Sightings2.PNG b/20220615-NATO-MUG-UPDATE/Sightings2.PNG new file mode 100644 index 0000000..cd35990 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/Sightings2.PNG differ diff --git a/20220615-NATO-MUG-UPDATE/attack-screenshot.png b/20220615-NATO-MUG-UPDATE/attack-screenshot.png new file mode 100644 index 0000000..44cf2ff Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/attack-screenshot.png differ diff --git a/20220615-NATO-MUG-UPDATE/b.4-turning-data-into-actionable-intelligence-short.pdf b/20220615-NATO-MUG-UPDATE/b.4-turning-data-into-actionable-intelligence-short.pdf new file mode 100644 index 0000000..2bdf2e6 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/b.4-turning-data-into-actionable-intelligence-short.pdf differ diff --git a/20220615-NATO-MUG-UPDATE/bankaccount.png b/20220615-NATO-MUG-UPDATE/bankaccount.png new file mode 100644 index 0000000..94eb5cc Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/bankaccount.png differ diff --git a/20220615-NATO-MUG-UPDATE/bankview.png b/20220615-NATO-MUG-UPDATE/bankview.png new file mode 100644 index 0000000..ce629c1 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/bankview.png differ diff --git a/20220615-NATO-MUG-UPDATE/circl.png b/20220615-NATO-MUG-UPDATE/circl.png new file mode 100644 index 0000000..c570ff2 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/circl.png differ diff --git a/20220615-NATO-MUG-UPDATE/content.tex b/20220615-NATO-MUG-UPDATE/content.tex new file mode 100644 index 0000000..c598bfc --- /dev/null +++ b/20220615-NATO-MUG-UPDATE/content.tex @@ -0,0 +1,312 @@ +% DO NOT COMPILE THIS FILE DIRECTLY! +% This is included by the other .tex files. + +\begin{frame} +\titlepage +\end{frame} + +\begin{frame} + \frametitle{The aim of this presentation} + \begin{itemize} + \item A small update on the state of MISP's ongoing development + \item Some highlights of the changes that were introduced + \item Upcoming changes + \item Cerebrate update + \item Workflows + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{MISP's evolution since the last MUG} + \begin{itemize} + \item Since the last MUG (18/11/2021) we've had: + \begin{itemize} + \item 9 releases + \item 1775 commits + \item 74 contributors contributing to the core software and its components + \end{itemize} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Main focus was securing our data and tooling} + \begin{itemize} + \item Current {\bf geo-political situation} lead to new challenges + \item It has been an interesting time period with quite some activity + \item Our goal was to {\bf shore up the security} aspects of MISP and Cerebrate + \item Build new functionalities and tools to allow users to {\bf protect their data} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Sharing group blueprints} + \begin{itemize} + \item Solving the issue of {\bf sharing group lifecycle management} + \item Build SG blueprints for reusable, maintainable sharing groups + \item Abstract sharing groups, organisation metadata as building blocks + \item Solve newly arising sharing challenges + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Sharing group blueprints} +\includegraphics[scale=0.6]{images/blueprints2.png} +\end{frame} + +\begin{frame} + \frametitle{Cryptographic signing and tamper protection} + \begin{itemize} + \item Need to be able to share and ensure the {\bf veracity of critical events} + \item Tampering by {\bf malicious intermediaries}, even in closed networks became a new fear + \item We came up with a solution that allows us to {\bf lock down critical events} + \item Limits the distribution, but {\bf increases the resilience} of MISP immensely + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Cryptographic signing and tamper protection} +\includegraphics[scale=0.5]{images/signing1.png} +\end{frame} + +\begin{frame} +\frametitle{Cryptographic signing and tamper protection} +\includegraphics[scale=0.5]{images/signing2.png} +\end{frame} + +\begin{frame} +\frametitle{Cryptographic signing and tamper protection} +\includegraphics[scale=0.6]{images/signing3.png} +\includegraphics[scale=0.6]{images/signing4.png} +\end{frame} + +\begin{frame} + \frametitle{Other major improvements} + \begin{itemize} + \item Various other new functionalities that improve our day to day use of the tool + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Long list of security fixes} + \begin{itemize} + \item Partially from user reports + \item Partially by an exhaustive pentest series + \item Massive thank you to {\bf Zigrin Security} for conducting the tests... + \item ...and to the {\bf Luxembourgish Army} for financing it + \item Multiple {\bf CVEs} resolved, including a {\bf critical one that required a silent release} + \item Make sure you stay up to date! + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Long list of security fixes} +\includegraphics[scale=0.4]{images/security.png} +\end{frame} + + +\begin{frame} + \frametitle{Event warning system} + \begin{itemize} + \item Build a rule based tool that analyses an event and {\bf recommends improvements} + \item Typical issues easily caught (missing TLP, lack of context, etc) + \item Simple to extend, flexible + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Event warning system} +\includegraphics[scale=0.3]{images/warnings.png} +\end{frame} + + +\begin{frame} + \frametitle{Massive rework of the STIX integrations} + \begin{itemize} + \item Our resident STIX guru (Christian Studer) has become {\bf co-chair of the STIX commitee} at OASIS + \item Massive rework of how we handle {\bf STIX ingestion / generation} + \item Continuous work with {\bf Mitre/CISA} to improve the integration + \item STIX subsystem spun off as a standalone system + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Further synchronisation filtering methods} + \begin{itemize} + \item The ability to {\bf exclude} certain attribute {\bf types from the synchronisation} + \item Comes with some risks, but solves some issues + \item An example: {\bf Exclusion of malware samples when sharing towards classified networks} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Advanced timelining} + \begin{itemize} + \item Rework of the timelining in MISP + \item Inclusion of images, sightings + \item Various other improvements + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Timelining} +\includegraphics[scale=0.2]{images/timelining.png} +\end{frame} + +\begin{frame} + \frametitle{New background processor} + \begin{itemize} + \item Since late November last year we have had a {\bf new background processing engine} + \item Fully optional for now + \item Lean, closer to an OS native implementation via {\bf Supervisor} + \item Gets rid of a lot of the baggage of our previous system (scheduling) + \item Implemetation by @righel (Luciano Righetti) + \end{itemize} +\end{frame} + + +\begin{frame} + \frametitle{Long list of other fixes} + \begin{itemize} + \item Usability fixes + \item Performance improvements + \item Bug fixes + \item Too many improvements to the galaxies, taxonomies, object templates to list! + \item Huge thank you to {\bf Jakub Onderka} for the {\bf constant stream of improvements} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{What do we have planned for the (near) future?} +\end{frame} + +\begin{frame} + \frametitle{Workflows in MISP} + \begin{itemize} + \item Outcome of our initial work from GeekWeek 7.5\footnote{\href{https://cyber.gc.ca/en/events/geekweek-75}{Workshop organized by the Canadian Cyber Center}} + \item Goal: Modifying the execution of certain {\bf core functionalities} + \item Basically a {\bf hooking mechanism} + \item Modular approach using {\bf MISP-modules} or {\bf PHP modules} + \item Build and execute admin defined tasks on various actions + \item Modify data in place, block, fire-and-forget + \item All exposed via a {\bf completely new GUI} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Workflows in MISP} + \begin{itemize} + \item {\bf Branching} codebase + \item Context sensitive, per-module filters + \item Implemented by our UI expert Sami "GraphMan" Mokaddem + \end{itemize} +\end{frame} + + +\begin{frame} +\frametitle{Workflows in MISP} +\includegraphics[scale=0.2]{images/workflows1.png} +\end{frame} + +\begin{frame} +\frametitle{Workflows in MISP} +\includegraphics[scale=0.2]{images/workflows2.png} +\end{frame} + + +\begin{frame} + \frametitle{External data guard} + \begin{itemize} + \item Work in {\bf collaboration with BICES} + \item Proxy server that {\bf inspects and blocks potential data leaks} during synchronisation + \item Standalone + \item Simplistic design and {\bf easy to audit} + \item Modular {\bf rule based} system + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Various reworks to support STIX mappings} + \begin{itemize} + \item {\bf Relationships for tags/galaxies} + \item {\bf Templating} for galaxy cluster creation + \item Dot notation {\bf deep cluster elements} + \item Built in {\bf TAXII support} with the help of Mitre/CISA (currently not merged yet) + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Quick Cerebrate update} +\begin{center} +\includegraphics[scale=0.4]{images/cerebrate.png} +\end{center} +\end{frame} + +\begin{frame} + \frametitle{Quick Cerebrate update} + \begin{itemize} + \item 5 new releases + \item Deployment for the {\bf CSIRT network} ongoing + \item A host of new functionalities to solve day to day issues we have in the CSIRT community + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{User management} + \begin{itemize} + \item Reworked completely + \item Tight integration with {\bf KeyCloak} + \item Full user provisioning / maintaining via Cerebrate + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Reworked meta information system} + \begin{itemize} + \item Introduction of {\bf context specific custom fields} + \item Custom {\bf search algorithms} (for example CIDR block lookups for constituency information) + \item Customisable and {\bf blueprint-able data model} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{API along with its documentation fleshed out} + \begin{itemize} + \item {\bf OpenAPI integration} similarly to MISP + \item Integration tests and introduction of a {\bf CI pipeline} + \item Documentation and API examples available in Cerebrate directly + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Security fixes} + \begin{itemize} + \item Cerebrate, similarly to MISP received an in-depth pentest by {\bf Zigrin Security} + \item Likewise funded by the {\bf Luxembourgish Army} + \item Besides fixes to vulnerabilities, a host of usability findings and fixes + \item {\bf 5 CVEs} published + \item \url{https://www.cerebrate-project.org/security.html} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Get in touch if you have any questions} + \begin{itemize} + \item Contact CIRCL + \begin{itemize} + \item info@circl.lu + \item \url{https://twitter.com/circl_lu} + \item \url{https://www.circl.lu/} + \end{itemize} + \item Contact MISPProject + \begin{itemize} + \item \url{https://github.com/MISP} + \item \url{https://gitter.im/MISP/MISP} + \item \url{https://twitter.com/MISPProject} + \end{itemize} + \item Cerebrate project + \begin{itemize} + \item \url{https://github.com/cerebrate-project} + \item \url{https://github.com/cerebrate-project/cerebrate} + \end{itemize} + \end{itemize} +\end{frame} diff --git a/20220615-NATO-MUG-UPDATE/covid.png b/20220615-NATO-MUG-UPDATE/covid.png new file mode 100644 index 0000000..e6e869f Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/covid.png differ diff --git a/20220615-NATO-MUG-UPDATE/creativity.png b/20220615-NATO-MUG-UPDATE/creativity.png new file mode 100644 index 0000000..d9878e2 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/creativity.png differ diff --git a/20220615-NATO-MUG-UPDATE/dashboard-trendings.png b/20220615-NATO-MUG-UPDATE/dashboard-trendings.png new file mode 100644 index 0000000..e8937e4 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/dashboard-trendings.png differ diff --git a/20220615-NATO-MUG-UPDATE/decaying-basescore.png b/20220615-NATO-MUG-UPDATE/decaying-basescore.png new file mode 100644 index 0000000..d21e261 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/decaying-basescore.png differ diff --git a/20220615-NATO-MUG-UPDATE/decaying-event.png b/20220615-NATO-MUG-UPDATE/decaying-event.png new file mode 100644 index 0000000..553b9e7 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/decaying-event.png differ diff --git a/20220615-NATO-MUG-UPDATE/decaying-index.png b/20220615-NATO-MUG-UPDATE/decaying-index.png new file mode 100644 index 0000000..c8c9754 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/decaying-index.png differ diff --git a/20220615-NATO-MUG-UPDATE/decaying-simulation.png b/20220615-NATO-MUG-UPDATE/decaying-simulation.png new file mode 100644 index 0000000..8252a09 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/decaying-simulation.png differ diff --git a/20220615-NATO-MUG-UPDATE/decaying-tool.png b/20220615-NATO-MUG-UPDATE/decaying-tool.png new file mode 100644 index 0000000..ff8c298 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/decaying-tool.png differ diff --git a/20220615-NATO-MUG-UPDATE/en_cef.png b/20220615-NATO-MUG-UPDATE/en_cef.png new file mode 100644 index 0000000..5fed070 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/en_cef.png differ diff --git a/20220615-NATO-MUG-UPDATE/galaxy-ransomware.png b/20220615-NATO-MUG-UPDATE/galaxy-ransomware.png new file mode 100644 index 0000000..5cf42cc Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/galaxy-ransomware.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/SoD.png b/20220615-NATO-MUG-UPDATE/images/SoD.png new file mode 100644 index 0000000..b95a9ec Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/SoD.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/authkey.png b/20220615-NATO-MUG-UPDATE/images/authkey.png new file mode 100644 index 0000000..46174b9 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/authkey.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/blueprints1.png b/20220615-NATO-MUG-UPDATE/images/blueprints1.png new file mode 100644 index 0000000..edaedcb Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/blueprints1.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/blueprints2.png b/20220615-NATO-MUG-UPDATE/images/blueprints2.png new file mode 100644 index 0000000..b2d73cb Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/blueprints2.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/cerebrate.png b/20220615-NATO-MUG-UPDATE/images/cerebrate.png new file mode 100644 index 0000000..82bcaab Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/cerebrate.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/dashboard.png b/20220615-NATO-MUG-UPDATE/images/dashboard.png new file mode 100644 index 0000000..d163f4d Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/dashboard.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/eventreport.png b/20220615-NATO-MUG-UPDATE/images/eventreport.png new file mode 100644 index 0000000..6f74bbe Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/eventreport.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/galaxy20.png b/20220615-NATO-MUG-UPDATE/images/galaxy20.png new file mode 100644 index 0000000..97911ac Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/galaxy20.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/mispcerebrate.png b/20220615-NATO-MUG-UPDATE/images/mispcerebrate.png new file mode 100644 index 0000000..d58796f Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/mispcerebrate.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/openapi.png b/20220615-NATO-MUG-UPDATE/images/openapi.png new file mode 100644 index 0000000..44726ea Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/openapi.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/security.png b/20220615-NATO-MUG-UPDATE/images/security.png new file mode 100644 index 0000000..8b51dd8 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/security.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/signing1.png b/20220615-NATO-MUG-UPDATE/images/signing1.png new file mode 100644 index 0000000..d378f7b Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/signing1.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/signing2.png b/20220615-NATO-MUG-UPDATE/images/signing2.png new file mode 100644 index 0000000..450e7d6 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/signing2.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/signing3.png b/20220615-NATO-MUG-UPDATE/images/signing3.png new file mode 100644 index 0000000..68e7ced Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/signing3.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/signing4.png b/20220615-NATO-MUG-UPDATE/images/signing4.png new file mode 100644 index 0000000..3a42468 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/signing4.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/stix.png b/20220615-NATO-MUG-UPDATE/images/stix.png new file mode 100644 index 0000000..c0b59bb Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/stix.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/timelining.png b/20220615-NATO-MUG-UPDATE/images/timelining.png new file mode 100644 index 0000000..7753ba5 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/timelining.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/warnings.png b/20220615-NATO-MUG-UPDATE/images/warnings.png new file mode 100644 index 0000000..86e16a3 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/warnings.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/workflows1.png b/20220615-NATO-MUG-UPDATE/images/workflows1.png new file mode 100644 index 0000000..2790cfb Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/workflows1.png differ diff --git a/20220615-NATO-MUG-UPDATE/images/workflows2.png b/20220615-NATO-MUG-UPDATE/images/workflows2.png new file mode 100644 index 0000000..5b5ad1a Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/images/workflows2.png differ diff --git a/20220615-NATO-MUG-UPDATE/logo-circl.pdf b/20220615-NATO-MUG-UPDATE/logo-circl.pdf new file mode 100755 index 0000000..62c9239 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/logo-circl.pdf differ diff --git a/20220615-NATO-MUG-UPDATE/makefile b/20220615-NATO-MUG-UPDATE/makefile new file mode 100644 index 0000000..6e5a51d --- /dev/null +++ b/20220615-NATO-MUG-UPDATE/makefile @@ -0,0 +1,5 @@ +all: + pdflatex -interaction nonstopmode -halt-on-error -file-line-error slide.tex + +clean: + rm *.aux *.nav *.log *.snm *.toc *.vrb diff --git a/20220615-NATO-MUG-UPDATE/misp.pdf b/20220615-NATO-MUG-UPDATE/misp.pdf new file mode 100644 index 0000000..f7a3f9d Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/misp.pdf differ diff --git a/20220615-NATO-MUG-UPDATE/misplogo.pdf b/20220615-NATO-MUG-UPDATE/misplogo.pdf new file mode 100755 index 0000000..60da568 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/misplogo.pdf differ diff --git a/20220615-NATO-MUG-UPDATE/object.png b/20220615-NATO-MUG-UPDATE/object.png new file mode 100644 index 0000000..acebf04 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/object.png differ diff --git a/20220615-NATO-MUG-UPDATE/sighting-n.png b/20220615-NATO-MUG-UPDATE/sighting-n.png new file mode 100644 index 0000000..f9ec127 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/sighting-n.png differ diff --git a/20220615-NATO-MUG-UPDATE/slide.tex b/20220615-NATO-MUG-UPDATE/slide.tex new file mode 100644 index 0000000..4d5c0f7 --- /dev/null +++ b/20220615-NATO-MUG-UPDATE/slide.tex @@ -0,0 +1,25 @@ +\documentclass{beamer} +\usetheme[numbering=progressbar]{focus} +\definecolor{main}{RGB}{47, 161, 219} +\definecolor{textcolor}{RGB}{128, 128, 128} +\definecolor{background}{RGB}{240, 247, 255} + +\usepackage[utf8]{inputenc} +\usepackage{tikz} +\usepackage{listings} +\usepackage{adjustbox} +\usetikzlibrary{positioning} +\usetikzlibrary{shapes,arrows} +%\usepackage[T1]{fontenc} +%\usepackage[scaled]{beramono} +\author{\small{\input{../includes/authors.txt}}} +\title{MISP status update} +\subtitle{News since the last MUG} +\institute{\includegraphics[scale=0.5]{misplogo.pdf}} +\titlegraphic{\includegraphics[scale=0.85]{misp.pdf}} + +\date{\input{../includes/location.txt}} +\begin{document} +\include{content} +\end{document} + diff --git a/20220615-NATO-MUG-UPDATE/taxonomy-workflow.png b/20220615-NATO-MUG-UPDATE/taxonomy-workflow.png new file mode 100644 index 0000000..f4789ad Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/taxonomy-workflow.png differ diff --git a/20220615-NATO-MUG-UPDATE/timeline-misp-overview.png b/20220615-NATO-MUG-UPDATE/timeline-misp-overview.png new file mode 100644 index 0000000..23ff19b Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/timeline-misp-overview.png differ diff --git a/20220615-NATO-MUG-UPDATE/timeline.jpeg b/20220615-NATO-MUG-UPDATE/timeline.jpeg new file mode 100644 index 0000000..d60db13 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/timeline.jpeg differ diff --git a/20220615-NATO-MUG-UPDATE/warning-list-event.png b/20220615-NATO-MUG-UPDATE/warning-list-event.png new file mode 100644 index 0000000..22c6423 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/warning-list-event.png differ diff --git a/20220615-NATO-MUG-UPDATE/warning-list.png b/20220615-NATO-MUG-UPDATE/warning-list.png new file mode 100644 index 0000000..f151ded Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/warning-list.png differ diff --git a/20220615-NATO-MUG-UPDATE/workflow_initial.png b/20220615-NATO-MUG-UPDATE/workflow_initial.png new file mode 100644 index 0000000..7c6b54c Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/workflow_initial.png differ diff --git a/20220615-NATO-MUG-UPDATE/workflow_initial2.png b/20220615-NATO-MUG-UPDATE/workflow_initial2.png new file mode 100644 index 0000000..d384c34 Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/workflow_initial2.png differ diff --git a/20220615-NATO-MUG-UPDATE/x-isac-logo.png b/20220615-NATO-MUG-UPDATE/x-isac-logo.png new file mode 100755 index 0000000..21c68bc Binary files /dev/null and b/20220615-NATO-MUG-UPDATE/x-isac-logo.png differ