From 983d520f812f71fabf7db6c4e0366e3f46a14964 Mon Sep 17 00:00:00 2001 From: Andras Iklody Date: Tue, 21 May 2019 10:01:39 +0200 Subject: [PATCH] Update tools.md --- _pages/tools.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/_pages/tools.md b/_pages/tools.md index 4252158..a333ad3 100644 --- a/_pages/tools.md +++ b/_pages/tools.md @@ -118,3 +118,7 @@ For the additional software created by the MISP project, check our [MISP project * [Viper](http://www.viper.li/) - is a binary management and analysis framework dedicated to malware and exploit researchers including a MISP module. * [vt2misp](https://github.com/eCrimeLabs/vt2misp) - Script to fetch data from virustotal and add it to a specific event as an object. * [yara-exporter](https://github.com/BSI-CERT-Bund/yara-exporter) - Exporting MISP event attributes to yara rules usable with Thor apt scanner. + +### Tutorials on interconnecting MISP with other tools + +* [ElasticSearch](https://www.securitydistractions.com/2019/05/17/enriching-elasticsearch-with-threat-data-part-1-misp/) - Excellent guide by David Clayton, explaining how he integrated MISP with ElasticSearch/Logstash via Memcached.