MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [cogsec] some url fixed

pull/21/head
Alexandre Dulaunoy 2020-03-27 11:14:20 +01:00
parent c64d7f1033
commit cfdc49d350
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 8 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
_posts/2020-03-27-cogsec-collab-misp-community.md
View File

@ -4,11 +4,9 @@ title: Cogsec Collab MISP Community
authors:
- VVX7
date: 2020-03-26
math: true
draft: false
diagram: true
tags: ["Disinformation", "Information Operations", "Cognitive Security", "MISP", "Threat Intelligence"]
categories: []
featured: /assets/images/cogsec/amitt.png
image:
placement: 3
caption: ''
@ -20,7 +18,7 @@ The below article has been kindly contributed by VVX7 (@VV\_X\_7 on twitter) on
*\- the MISP-Project team*
## A community dedicated to information operations
# A community dedicated to information operations
We're proud to announce the CogSec Collab MISP Community - the first public MISP sharing group dedicated to misinformation and information campaigns.
@ -43,14 +41,14 @@ At its core MISP is an automated correlation engine. It assists analysts in fin
## AM!TT Misinformation Pattern Galaxy
{{< figure src="galaxy_list.png" title="Descriptions of AMITT Techniques in the MISP Misinformation Pattern Galaxy." >}}
{{< figure src="/assets/images/cogsec/galaxy_list.png" title="Descriptions of AMITT Techniques in the MISP Misinformation Pattern Galaxy." >}}
Our first achievement was the integration of the [AM!TT Framework](https://github.com/misinfosecproject/amitt_framework) as a [MISP Galaxy](https://www.misp-project.org/galaxy.html#_misinformation_pattern). It contains the tags and definitions needed for describing the misinformation tactics and techniques present in a specific information operation.
## AM!TT Navigatord
{{< figure src="amitt.png" title="The MISP Project kindly developed this built-in technique navigator." lightbox="true" >}}
{{< figure src="/assets/images/cogsec/amitt.png" title="The MISP Project kindly developed this built-in technique navigator." lightbox="true" >}}
Applying the AM!TT galaxy information to an event must be easy in order to encourage use by already overburdened information researchers. The MISP Project developers kindly created an inline AM!TT Navigator to respond to this need for conveniently tagging events with AM!TT techniques.
@ -59,14 +57,13 @@ With this tool, analysts can simply click on the relevant techniques found in a
## DFRLab Dichotomies of Disinformation
{{< figure src="dfrlab.png" title="Atlantic Council's DFRLab Dichotomies of Disinformation" lightbox="true" >}}
{{< figure src="/assets/images/cogsec/dfrlab.png" title="Atlantic Council's DFRLab Dichotomies of Disinformation" lightbox="true" >}}
Also included in the CogSec Collab MISP is [Atlantic Council's DFRLab](https://www.atlanticcouncil.org/programs/digital-forensic-research-lab/) [Dichotomies of Disinformation](https://github.com/DFRLab/Dichotomies-of-Disinformation) which is a new standard for describing information campaigns that can be used alone or in complement to the AM!TT framework.
The work of the DFRLab is included in MISP as a Taxonomy - a set of machine tags for describing indicators and events.
## Future Work
From this point our next steps are to build elf communities and equip them with the tooling and training needed to be effective.