misp-website/_pages/covid-19-misp.md

52 lines
2.3 KiB
Markdown
Raw Normal View History

2020-04-03 15:35:34 +02:00
---
layout: page
title: COVID-19 MISP
permalink: /covid-19-misp/
toc: true
---
# COVID-19 MISP Information Sharing Community
2020-04-03 15:45:38 +02:00
2020-04-03 16:11:34 +02:00
COVID-19 MISP is a MISP instance retrofitted for a COVID-19 information sharing community, focusing on two areas of sharing:
2020-04-03 15:35:34 +02:00
- Medical information
- Cyber threats related to / abusing COVID-19
2020-04-03 16:11:34 +02:00
The information sharing community has a low barrier of entry, everyone can contribute and use the data. By default, the information is classified as TLP:WHITE for broader distribution and usefulness.
2020-04-03 15:35:34 +02:00
## Who is the target audience for this community ?
2020-04-03 16:11:34 +02:00
- Anyone wanting to gain situational awareness in regards to the current COVID-19 situation
2020-04-03 15:35:34 +02:00
- Security practitioners trying to fend off covid related attacks
- Those wanting to share, collaborate, visualise, automate data
2020-04-03 16:11:34 +02:00
- All data is contextualised as either medical or security related information to make filtering as easy and convenient as possible
2020-04-03 15:35:34 +02:00
2020-04-03 16:11:34 +02:00
## Why use MISP for such a context?
2020-04-03 15:35:34 +02:00
- We are obviously interested on a personal level, as is everyone
- Information sharing is what we do anyway
- The tools that we are building are expanding our capabilities for the future
- Bridging different domains affected in different ways can reveal correlations
## How to get access to the COVID-19 MISP
2020-04-03 16:11:34 +02:00
Access can be requested to CIRCL by sending an email to [CIRCL](mailto:info@circl.lu). A self-registration link will be available shortly.
2020-04-03 15:35:34 +02:00
## Training
- [MISP COVID-19 replay training session](https://bbb.secin.lu/playback/presentation/2.0/playback.html?meetingId=741e7d15e14e107dbfffe2106a8547abc8460f3e-1585312475228)
- [MISP COVID-19 Training](https://peertube.opencloud.lu/videos/watch/4f7acd4c-a909-4315-87aa-38ba95cceaf2)
2020-04-03 15:45:38 +02:00
- [MISP COVID-19 Slides](https://www.misp-project.org/misp-training/x.5-covid.pdf)
2020-04-03 15:35:34 +02:00
## Public Feeds generated from COVID-19 MISP community
2020-04-03 16:11:34 +02:00
Two public feeds are automatically generated from COVID-19 MISP. A filtered feed with the sources being selected by the MISP project team and another with all IOCs shared in the covid-19 MISP community.
2020-04-03 15:35:34 +02:00
- [covid_misp_filtered_ioc_list.csv](https://covid-19.iglocska.eu/public/covid_misp_filtered_ioc_list.csv)
- [covid_misp_full_ioc_list.csv](https://covid-19.iglocska.eu/public/covid_misp_full_ioc_list.csv)
## Dashboards available in COVID-19 MISP
![](/assets/images/misp/covid-dash.png){:class="img-responsive"}