MISP
/
misp-training
mirror of https://github.com/MISP/misp-training
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge branch 'master' of github.com:MISP/misp-training

changes-actionable
mokaddem 2019-10-21 11:57:26 +02:00
parent fdd6b7caec ad08baf68f
commit b822a30fa9
7 changed files with 123 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
misp-summit/2019/summary/content.aux
View File

@ -12,14 +12,22 @@
\@writefile{nav}{\headcommand {\beamer@framepages {5}{5}}}
\@writefile{nav}{\headcommand {\slideentry {0}{0}{6}{6/6}{}{0}}}
\@writefile{nav}{\headcommand {\beamer@framepages {6}{6}}}
\@writefile{nav}{\headcommand {\slideentry {0}{0}{7}{7/7}{}{0}}}
\@writefile{nav}{\headcommand {\beamer@framepages {7}{7}}}
\@writefile{nav}{\headcommand {\slideentry {0}{0}{8}{8/8}{}{0}}}
\@writefile{nav}{\headcommand {\beamer@framepages {8}{8}}}
\@writefile{nav}{\headcommand {\slideentry {0}{0}{9}{9/9}{}{0}}}
\@writefile{nav}{\headcommand {\beamer@framepages {9}{9}}}
\@writefile{nav}{\headcommand {\slideentry {0}{0}{10}{10/10}{}{0}}}
\@writefile{nav}{\headcommand {\beamer@framepages {10}{10}}}
\@setckpt{content}{
\setcounter{page}{7}
\setcounter{page}{11}
\setcounter{equation}{0}
\setcounter{enumi}{0}
\setcounter{enumii}{0}
\setcounter{enumiii}{0}
\setcounter{enumiv}{0}
\setcounter{footnote}{4}
\setcounter{footnote}{7}
\setcounter{mpfootnote}{0}
\setcounter{beamerpauses}{1}
\setcounter{bookmark@seq@number}{0}
@ -28,8 +36,8 @@
\setcounter{section}{0}
\setcounter{subsection}{0}
\setcounter{subsubsection}{0}
\setcounter{subsectionslide}{6}
\setcounter{framenumber}{5}
\setcounter{subsectionslide}{10}
\setcounter{framenumber}{9}
\setcounter{figure}{0}
\setcounter{table}{0}
\setcounter{parentequation}{0}

46
misp-summit/2019/summary/content.tex
View File

@ -19,15 +19,23 @@
\begin{frame}
\frametitle{Major outcomes in 2019}
\begin{itemize}
\item 18 releases of the MISP core software which included more than 10 major new features. Attracting a large group of new users and contributors.
\item 18 releases of the MISP core software which included more than 10 major new features. Attracting a large group of new users and contributors
\end{itemize}
\includegraphics[scale=0.18]{cfd.png}
\includegraphics[scale=0.18]{objects-cfd.png}
\includegraphics[scale=0.18]{galaxy-cfd.png}
\begin{itemize}
\item Increase of contributions during 2019 (MISP core, MISP objects and galaxy libraries).
\item Increase of contributions during 2019 (MISP core, MISP objects and galaxy libraries)
\end{itemize}
\end{frame}
\begin{frame}
\frametitle{Security vulnerabilities}
\begin{itemize}
\item {\bf "We love the smell of security vulnerabilities report in the morning, it smells like a great day!"}
\item In 2019, we had 9 CVEs\footnote{\url{https://www.misp-project.org/security/}} for MISP core software
\item If you find or have any ongoing security review of MISP, don't be afraid to contact us directly
\end{itemize}
\end{frame}
\begin{frame}
@ -42,6 +50,18 @@
\end{itemize}
\end{frame}
\begin{frame}
\frametitle{Some cliffnotes of what changed in the MISP core since last year}
\begin{itemize}
\item Large focus on the APIs (rework of restSearch, {\bf modular export system}, rest client, templating)
\item Support for {\bf Matrix-like galaxies} starting with ATT\&CK
\item Strong focus on the {\bf graphing features} of MISP
\item More work on the {\bf use of objects} (possibility to turn flat events into object-based ones, etc)
\item More focus on features supporting {\bf multi-misp internal setups (local tags, CLI management, server caching)}
\item Massive amounts of work within and around MISP on contextualisation, all building up to the inclusion of the {\bf decaying model}
\end{itemize}
\end{frame}
\begin{frame}
\frametitle{MISP object templates}
\begin{itemize}
@ -51,6 +71,22 @@
\end{itemize}
\end{frame}
\begin{frame}
\frametitle{MISP taxonomies}
\begin{itemize}
\item There are {\bf 102 taxonomies} available in MISP project contributed by various organisations and partners
\item FIRST.org CTI SIG contributed an {\bf ICS/OT Threat Attribution Industrial Control System taxonomy}
\item MISP taxonomies\footnote{\url{https://www.misp-project.org/taxonomies.html}} are common libraries and sharing communities select usually a subset to match their needs
\end{itemize}
\end{frame}
\begin{frame}
\frametitle{MISP galaxies}
\begin{itemize}
\item There are {\bf 40 galaxies}\footnote{\url{https://www.misp-project.org/galaxy.html}} available in MISP project contributed by various organisations and partners
\item We introduced a specific matrix-like format (such as MITRE ATT\&CK model) and many new matrix-like were contributed such AM!TT Tactic (misinformation model), o365-exchange-techniques, attck4fraud, election guidelines
\end{itemize}
\end{frame}
\begin{frame}
@ -59,7 +95,11 @@
\item 2019 was a busy and successful year for the MISP project
\item The 2-year CEF grant was a bootstrap to improve MISP to its next level
\item New partnerships and projects are ongoing in 2020-2021 (such as the CEF VARIoT project or H2020 Enforce)
\item As the MISP project becomes larger, we are improving the structure of the project (misp-standard.org is the first step)
\item As the MISP project becomes larger, we are {\bf improving the structure of the project} (misp-standard.org is the first step)
\end{itemize}
\end{frame}
\begin{frame}
\includegraphics[scale=0.3]{misp-core-contributors.png}
\end{frame}

BIN
misp-summit/2019/summary/misp-core-contributors.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 973 KiB

10
misp-summit/2019/summary/slide.aux
View File

@ -19,8 +19,8 @@
\providecommand\HyField@AuxAddToCoFields[2]{}
\@input{content.aux}
\pgfsyspdfmark {pgfid1}{1398509}{16636717}
\@writefile{nav}{\headcommand {\beamer@partpages {1}{6}}}
\@writefile{nav}{\headcommand {\beamer@subsectionpages {1}{6}}}
\@writefile{nav}{\headcommand {\beamer@sectionpages {1}{6}}}
\@writefile{nav}{\headcommand {\beamer@documentpages {6}}}
\@writefile{nav}{\headcommand {\gdef \inserttotalframenumber {5}}}
\@writefile{nav}{\headcommand {\beamer@partpages {1}{10}}}
\@writefile{nav}{\headcommand {\beamer@subsectionpages {1}{10}}}
\@writefile{nav}{\headcommand {\beamer@sectionpages {1}{10}}}
\@writefile{nav}{\headcommand {\beamer@documentpages {10}}}
\@writefile{nav}{\headcommand {\gdef \inserttotalframenumber {9}}}

77
misp-summit/2019/summary/slide.log
View File

@ -1,4 +1,4 @@
This is pdfTeX, Version 3.14159265-2.6-1.40.18 (TeX Live 2017/Debian) (preloaded format=pdflatex 2018.10.13) 20 OCT 2019 22:32
This is pdfTeX, Version 3.14159265-2.6-1.40.18 (TeX Live 2017/Debian) (preloaded format=pdflatex 2018.10.13) 21 OCT 2019 09:17
entering extended mode
restricted \write18 enabled.
%&-line parsing enabled.
@ -1630,37 +1630,61 @@ LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/sc' will be
<cfd.png, id=46, 578.16pt x 578.16pt>
File: cfd.png Graphic file (type png)
<use cfd.png>
Package pdftex.def Info: cfd.png used on input line 31.
Package pdftex.def Info: cfd.png used on input line 30.
(pdftex.def) Requested size: 104.0643pt x 104.0643pt.
<objects-cfd.png, id=47, 578.16pt x 578.16pt>
File: objects-cfd.png Graphic file (type png)
<use objects-cfd.png>
Package pdftex.def Info: objects-cfd.png used on input line 31.
Package pdftex.def Info: objects-cfd.png used on input line 30.
(pdftex.def) Requested size: 104.0643pt x 104.0643pt.
<galaxy-cfd.png, id=48, 578.16pt x 578.16pt>
File: galaxy-cfd.png Graphic file (type png)
<use galaxy-cfd.png>
Package pdftex.def Info: galaxy-cfd.png used on input line 31.
Package pdftex.def Info: galaxy-cfd.png used on input line 30.
(pdftex.def) Requested size: 104.0643pt x 104.0643pt.
[3
<./cfd.png (PNG copy)> <./objects-cfd.png (PNG copy)> <./galaxy-cfd.png (PNG c
opy)>]
LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' will be
(Font) scaled to size 10.0pt on input line 43.
LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' will be
(Font) scaled to size 7.0pt on input line 43.
LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' will be
(Font) scaled to size 10.0pt on input line 43.
LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' will be
(Font) scaled to size 7.0pt on input line 43.
[4
opy)>] [4
] [5
]
LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' will be
(Font) scaled to size 10.0pt on input line 51.
LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' will be
(Font) scaled to size 7.0pt on input line 51.
LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' will be
(Font) scaled to size 10.0pt on input line 51.
LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' will be
(Font) scaled to size 7.0pt on input line 51.
[5
] [6
])
]
[7
] [8
] [9
]
<misp-core-contributors.png, id=92, 945.5325pt x 910.40125pt>
File: misp-core-contributors.png Graphic file (type png)
<use misp-core-contributors.png>
Package pdftex.def Info: misp-core-contributors.png used on input line 92.
(pdftex.def) Requested size: 945.5302pt x 910.39902pt.
Overfull \hbox (624.01395pt too wide) in paragraph at lines 92--92
[][]
[]
Overfull \vbox (654.82439pt too high) detected at line 92
[]
[10
<./misp-core-contributors.png>])
\tf@nav=\write5
\openout5 = `slide.nav'.
@ -1672,16 +1696,15 @@ LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' will be
Package atveryend Info: Empty hook `BeforeClearDocument' on input line 24.
Package atveryend Info: Empty hook `AfterLastShipout' on input line 24.
(./slide.aux (./content.aux))
(./slide.aux (./content.aux))
Package atveryend Info: Executing hook `AtVeryEndDocument' on input line 24.
Package atveryend Info: Empty hook `AtEndAfterFileList' on input line 24.
)
Here is how much of TeX's memory you used:
25628 strings out of 492982
512451 string characters out of 6134895
594976 words of memory out of 5000000
28582 multiletter control sequences out of 15000+600000
25650 strings out of 492982
512763 string characters out of 6134895
594977 words of memory out of 5000000
28595 multiletter control sequences out of 15000+600000
294402 words of font info for 82 fonts, out of 8000000 for 9000
1141 hyphenation exceptions out of 8191
71i,16n,83p,811b,830s stack positions out of 5000i,500n,10000p,200000b,80000s
@ -1692,10 +1715,10 @@ ts/type1/public/fira/FiraMono-Regular.pfb></usr/share/texlive/texmf-dist/fonts/
type1/public/fira/FiraSans-Bold.pfb></usr/share/texlive/texmf-dist/fonts/type1/
public/fira/FiraSans-Regular.pfb></usr/share/texlive/texmf-dist/fonts/type1/pub
lic/amsfonts/symbols/msam10.pfb>
Output written on slide.pdf (6 pages, 315446 bytes).
Output written on slide.pdf (10 pages, 1365318 bytes).
PDF statistics:
96 PDF objects out of 1000 (max. 8388607)
69 compressed objects within 1 object stream
13 named destinations out of 1000 (max. 500000)
63 words of extra memory for PDF output out of 10000 (max. 10000000)
125 PDF objects out of 1000 (max. 8388607)
92 compressed objects within 1 object stream
21 named destinations out of 1000 (max. 500000)
68 words of extra memory for PDF output out of 10000 (max. 10000000)

18
misp-summit/2019/summary/slide.nav
View File

@ -10,8 +10,16 @@
\headcommand {\beamer@framepages {5}{5}}
\headcommand {\slideentry {0}{0}{6}{6/6}{}{0}}
\headcommand {\beamer@framepages {6}{6}}
\headcommand {\beamer@partpages {1}{6}}
\headcommand {\beamer@subsectionpages {1}{6}}
\headcommand {\beamer@sectionpages {1}{6}}
\headcommand {\beamer@documentpages {6}}
\headcommand {\gdef \inserttotalframenumber {5}}
\headcommand {\slideentry {0}{0}{7}{7/7}{}{0}}
\headcommand {\beamer@framepages {7}{7}}
\headcommand {\slideentry {0}{0}{8}{8/8}{}{0}}
\headcommand {\beamer@framepages {8}{8}}
\headcommand {\slideentry {0}{0}{9}{9/9}{}{0}}
\headcommand {\beamer@framepages {9}{9}}
\headcommand {\slideentry {0}{0}{10}{10/10}{}{0}}
\headcommand {\beamer@framepages {10}{10}}
\headcommand {\beamer@partpages {1}{10}}
\headcommand {\beamer@subsectionpages {1}{10}}
\headcommand {\beamer@sectionpages {1}{10}}
\headcommand {\beamer@documentpages {10}}
\headcommand {\gdef \inserttotalframenumber {9}}

BIN
misp-summit/2019/summary/slide.pdf
View File

Binary file not shown.