mirror of https://github.com/MISP/misp-website
167 lines
10 KiB
HTML
167 lines
10 KiB
HTML
<!DOCTYPE HTML>
|
||
<!--
|
||
Arcana by HTML5 UP
|
||
html5up.net | @n33co
|
||
Free for personal and commercial use under the CCA 3.0 license (html5up.net/license)
|
||
-->
|
||
<html>
|
||
<head>
|
||
<title>MISP Communities and MISP Feeds</title>
|
||
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
|
||
<meta name="description" content="MISP - a threat information sharing platform" />
|
||
<meta name="keywords" content="MISP, CTI, malware, threat, cyber, intelligence, information exchange, sharing, open source, MISP threat sharing, Malware Information Sharing Platform" />
|
||
<link rel="apple-touch-icon-precomposed" sizes="144x144" href="/misp-website//assets/images/ico/favicon-144.png">
|
||
<link rel="apple-touch-icon-precomposed" sizes="114x114" href="/misp-website//assets/images/ico/favicon-114.png">
|
||
<link rel="apple-touch-icon-precomposed" sizes="72x72" href="/misp-website//assets/images/ico/favicon-72.png">
|
||
<link rel="apple-touch-icon-precomposed" href="/misp-website//assets/images/ico/favicon-57.png">
|
||
<link rel="shortcut icon" href="/misp-website//assets/images/ico/favicon.png">
|
||
<script src="/misp-website//assets/js/jquery.min.js"></script>
|
||
<script src="/misp-website//assets/js/jquery.dropotron.min.js"></script>
|
||
<script src="/misp-website//assets/js/skel.min.js"></script>
|
||
<script src="/misp-website//assets/js/util.js"></script>
|
||
<!--[if lte IE 8]><script src="/misp-website//assets/js/ie/respond.min.js"></script><![endif]-->
|
||
<script src="/misp-website//assets/js/main.js"></script>
|
||
<!--[if lte IE 8]><script src="/misp-website//assets/js/ie/html5shiv.js"></script><![endif]-->
|
||
<link rel="stylesheet" href="/misp-website//assets/css/main.css" />
|
||
<!--[if lte IE 8]><link rel="stylesheet" href="/misp-website//assets/css/ie8.css" /><![endif]-->
|
||
<!--[if lte IE 9]><link rel="stylesheet" href="/misp-website//assets/css/ie9.css" /><![endif]-->
|
||
<link rel="alternate" type="application/rss+xml" title="" href="/misp-website//feed.xml">
|
||
</head>
|
||
<body>
|
||
|
||
<!-- Header -->
|
||
<div id="header">
|
||
<!-- Logo -->
|
||
<h1><em><a href="/misp-website//index.html" id="MISP"><img src="/misp-website//assets/images/misp-small.png" /></em></a></h1>
|
||
<h1> MISP Malware Information Sharing Platform and Threat Sharing. </h1>
|
||
<!-- Nav -->
|
||
<nav id="nav">
|
||
<ul>
|
||
|
||
<li ><a href="/misp-website//index.html">Home</a></li>
|
||
<li ><a href="/misp-website//features.html">Features</a></li>
|
||
<li ><a href="/misp-website//news">News</a></li>
|
||
<li ><a href="/misp-website//download">Download</a></li>
|
||
<li>
|
||
<a href="/misp-website//datamodels">Data models</a>
|
||
<ul>
|
||
<li><a href="/misp-website//datamodels#misp-core-format">MISP core format</a></li>
|
||
<li><a href="/misp-website//datamodels#misp-taxonomies">MISP taxonomies</a></li>
|
||
</ul>
|
||
</li>
|
||
<li ><a href="/misp-website//documentation">Documentation</a></li>
|
||
<li ><a href="/misp-website//who">Who</a></li>
|
||
<li class="current"><a href="/misp-website//communities">Communities</a></li>
|
||
|
||
</ul>
|
||
</nav>
|
||
|
||
</div>
|
||
|
||
<section class="wrapper style1">
|
||
<div class="container">
|
||
<div id="content">
|
||
<div class="row double">
|
||
<div class="8u">
|
||
<article>
|
||
<h2 id="misp-communities">MISP Communities</h2>
|
||
|
||
<p>MISP is an open source software and it’s also a large community of MISP users creating, maintaining and operating communities of users or organizations sharing information about threats or cyber security indicators worldwide. The MISP project doesn’t maintain an exhaustive list of all communities relying on MISP especially that some communities use MISP internally or privately.</p>
|
||
|
||
<h1 id="known-existing-communities">Known Existing Communities</h1>
|
||
|
||
<p>Each communities might have specific rules to join them. Take a look and feel free to contact the respective communities that fit your organization. Some of existing public communities might be interconnected and some might be in an island mode. By running MISP, these communities usually allow their members to connect using the MISP API, MISP user-interface or even to synchronize your MISP instance with their communities. If you want to add your MISP community in the list,don’t hesitate to contact us.</p>
|
||
|
||
<h3 id="circl-misp-community">CIRCL MISP Community</h3>
|
||
|
||
<p><a href="https://www.circl.lu">CIRCL</a> operates a fairly large MISP community (more than 500 organizations are members) mainly targeting private organizations, companies, financial organizations or IT security companies. <a href="https://www.circl.lu/services/misp-malware-information-sharing-platform">For more information</a> and how to join this community.</p>
|
||
|
||
<h3 id="civicert-misp-community">CiviCERT MISP Community</h3>
|
||
|
||
<p><a href="https://civicert.org/">CiviCERT</a> is an umbrella organizations formed by the partnership between Internet Content and Service Providers, Non Governmental Organizations and individuals that contribute some of their time and resources to the community in order to globally improve the security awareness of civil society. The community is fairly new but uses MISP into inform its constituents of malicious activities in their infrastructure.</p>
|
||
|
||
<h3 id="fidelis-malwarerat-community">Fidelis malware/RAT Community</h3>
|
||
|
||
<p><a href="https://www.fidelissecurity.com/resources/fidelis-barncat">Fidelis Barncat™ Intelligence Database </a> includes more than 100,000 records with remote access tool (RAT) configuration settings. You can <a href="https://www.fidelissecurity.com/resources/fidelis-barncat">apply for access</a> at the following location.</p>
|
||
|
||
<h3 id="nato-misp-community">NATO MISP Community</h3>
|
||
|
||
<p>The NATO Communications and Information (NCI) Agency operates a MISP community, <a href="https://www.ncia.nato.int/Documents/Agency%20publications/Malware%20Information%20Sharing%20Platform%20(MISP).pdf">for more information</a>.</p>
|
||
|
||
<h2 id="misp-feed-communities">MISP Feed Communities</h2>
|
||
|
||
<p>MISP integrates a functionality called feed that allows to fetch directly MISP events from a server without prior agreement. Two OSINT feeds are included by default in MISP and can be enabled in any new installation. Providers and partners can provide easily their feeds by using the simple <a href="https://github.com/CIRCL/PyMISP/tree/master/examples/feed-generator">PyMISP feed-generator</a>. For more information, an article about “<a href="https://www.vanimpe.eu/2016/03/23/using-open-source-intelligence-osint-with-misp/">Using open source intelligence feeds, OSINT, with MISP</a>”.</p>
|
||
|
||
<h3 id="circl-osint-feed">CIRCL OSINT Feed</h3>
|
||
|
||
<p><a href="https://www.circl.lu/">CIRCL</a> provides a MISP OSINT feed from various sources including their own analysis.</p>
|
||
|
||
<p>MISP URL location is <a href="https://www.circl.lu/doc/misp/feed-osint">https://www.circl.lu/doc/misp/feed-osint</a>.</p>
|
||
|
||
<h3 id="botvrijeu-osint-feed">Botvrij.eu OSINT feed</h3>
|
||
|
||
<p><a href="http://www.botvrij.eu/">Botvrij.eu</a> provides a MISP OSINT feed out of public report.</p>
|
||
|
||
<p>MISP URL location is <a href="http://www.botvrij.eu/data/feed-osint">http://www.botvrij.eu/data/feed-osint</a>.</p>
|
||
|
||
</article>
|
||
</div>
|
||
<div class="4u" id="toc">
|
||
<h3> Table of Content </h3>
|
||
<ul class="section-nav">
|
||
<li class="toc-entry toc-h2"><a href="#misp-communities">MISP Communities</a></li>
|
||
<li class="toc-entry toc-h1"><a href="#known-existing-communities">Known Existing Communities</a></li>
|
||
<li class="toc-entry toc-h3"><a href="#circl-misp-community">CIRCL MISP Community</a></li>
|
||
<li class="toc-entry toc-h3"><a href="#civicert-misp-community">CiviCERT MISP Community</a></li>
|
||
<li class="toc-entry toc-h3"><a href="#fidelis-malwarerat-community">Fidelis malware/RAT Community</a></li>
|
||
<li class="toc-entry toc-h3"><a href="#nato-misp-community">NATO MISP Community</a></li>
|
||
<li class="toc-entry toc-h2"><a href="#misp-feed-communities">MISP Feed Communities</a></li>
|
||
<li class="toc-entry toc-h3"><a href="#circl-osint-feed">CIRCL OSINT Feed</a></li>
|
||
<li class="toc-entry toc-h3"><a href="#botvrijeu-osint-feed">Botvrij.eu OSINT feed</a></li>
|
||
</ul>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
</div>
|
||
</section>
|
||
|
||
|
||
<!-- Footer -->
|
||
<div id="footer">
|
||
<div class="container">
|
||
<div class="row ">
|
||
<div class="6u">
|
||
<div class="row collapse-at-2">
|
||
<section class="6u">
|
||
<!-- Icons -->
|
||
<h3>Join us!</h3>
|
||
<ul class="icons">
|
||
<li><a href="https://twitter.com/MISPProject" class="icon fa-twitter"><span class="label">Twitter</span></a></li>
|
||
<li><a href="https://github.com/MISP" class="icon fa-github"><span class="label">GitHub</span></a></li>
|
||
<li><a href="https://gitter.im/MISP" class="icon fa-gitter"><span class="label">Gitter</span></a></li>
|
||
</ul>
|
||
</section>
|
||
</div>
|
||
</div>
|
||
<section class="6u">
|
||
<h3>Get In Touch</h3>
|
||
<p>MISP is a community-driven project lead by the community of users.</p>
|
||
<p>You can get in touch with the MISP core team at the following email: <a href="mailto:info@misp-project.org">info@misp-project.org</a></p>
|
||
</section>
|
||
</div>
|
||
</div>
|
||
|
||
<!-- Copyright -->
|
||
<div class="copyright">
|
||
<ul class="menu">
|
||
<li>© MISP project. Software released under the AGPL license and content released as CC-BY-SA.</li><li>Design: <a href="http://html5up.net">HTML5 UP</a></li><li> Jekyll Template: <a href="http://cloudcannon.com">Cloud Cannon</a></li>
|
||
</ul>
|
||
</div>
|
||
|
||
</div>
|
||
|
||
</body>
|
||
</html>
|
||
|