misp-website

38 KiB

Executable File

Raw Blame History

type: page title: MISP Communities and MISP Feeds permalink: /communities/ toc: true

MISP is an open source software and it is also a large community of MISP users creating, maintaining and operating communities of users or organizations sharing information about threats or cyber security indicators worldwide. The MISP project doesn't maintain an exhaustive list of all communities relying on MISP especially that some communities use MISP internally or privately.

Known Existing and Public MISP Communities

Each community might have specific rules to join them. Below is a brief overview of existing communities, feel free to contact the respective communities that fit your organization. Some of existing public communities might be interconnected and some might be in an island mode. By running MISP, these communities usually allow their members to connect using the MISP API, MISP user-interface or even to synchronize your MISP instance with their communities. If you want to add your MISP community to the list, don't hesitate to contact us or do a Pull Request on this file.

The sign indicates the community is vetted by the MISP Project.

${class='community_logo'}$

Website: https://www.circl.lu/misp/
Sector: Various
Nationality: International

CIRCL operates a fairly large MISP sharing community (more than 1100 international organizations are members) mainly targeting private organizations, companies, financial organizations or IT security companies. Computer Incident Response Center Luxembourg (CIRCL) operates this sharing community for the benefit of the security community at large.

Contact: info@circl.lu

GPG key

${class='community_logo'}$

Website: https://www.circl.lu/misp/
Sector: Financial sector including banks, financial institutions and payment processing organisations
Nationality: International

CIRCL operates an information sharing community dedicated to the financial sector.

Contact: info@circl.lu

GPG key

${class='community_logo'}$

Website: https://www.circl.lu/misp/
Sector: n/g CSIRTs in EEA
Nationality: International

CIRCL operates an information sharing community dedicated to national/governmental CSIRTs/CERTs with national responsibilities in the EEA (European Economic Area).

Contact: info@circl.lu

GPG key

COVID-19 MISP community

Website: https://covid-19.iglocska.eu
Sector: undefined
Nationality: International

A community for tracking both health and cyber threat related information around COVID-19.

Contact: info@circl.lu

GPG key

CiviCERT MISP Community

${class='community_logo'}$

Website: https://www.civicert.org/
Sector: undefined
Nationality: International

CiviCERT is an umbrella organizations formed by the partnership between Internet Content and Service Providers, Non Governmental Organizations and individuals that contribute some of their time and resources to the community in order to globally improve the security awareness of civil society. The community is fairly new but uses MISP to inform its constituents of malicious activities in their infrastructure.

Danish MISP Community

Website: https://dk.ecrimelabs.net
Sector: undefined
Nationality: Danish

The Danish MISP User group/Community operates an information sharing community dedicated to Danish organisations.

Contact: misp@ecrimelabs.dk

GPG key

FIRST MISP Community

${class='community_logo'}$

Website: https://www.first.org/global/sigs/information-sharing/misp
Sector: undefined
Nationality: International

Since 1990, when FIRST was founded, its members have resolved an almost continuous stream of security-related attacks and incidents including handling thousands of security vulnerabilities affecting nearly all of the millions of computer systems and networks throughout the world connected by the ever growing Internet. FIRST brings together a wide variety of security and incident response teams including especially product security teams from the government, commercial, and academic sectors.

FIRST MISP instance allows FIRST members to efficiently share and store technical and non-technical information about malware samples, attackers and incidents. It also enables members who have not yet gained experience leveraging threat intelligence to connect with a wider community of organizations that have, increasing their own capabilities.

NATO MISP Community

${class='community_logo'}$

Website: https://misp.ncirc.nato.int
Sector: Governmental
Nationality: International

The ultimate goal of the project is to develop a NATO capability, available to all NATO nations, through which nations commit to sharing their information. This community is only open for official government cyber defense related entities, sponsored by their nation representative in the NATO Multinational MISP Steering Board.

Contact: mispsupport@ncia.nato.int

${class='community_logo'}$

Website: https://misp.pisax.org/
Sector: IXPs/GRXs
Nationality: International

The Action’s overall objective is to create a common pan-European Information Sharing and Analysis Center (ISAC) to support Internet Exchange Points (IXPs) and General Packet Radio Service Roaming eXchange (GRXs) at the national, European and international level.

${class='community_logo'}$

Website: https://www.x-isac.org/
Sector: ISACs and ISAOs
Nationality: International

X-ISAC (pronounced cross-ISAC) is the supporting Information Sharing and Analysis Center for other ISACs, information sharing communities or CSIRT networks which provides core software, cross-sector threat intelligence, taxonomies and open standards.

Contact: info@circl.lu

GPG key

BEAM SOC MISP Community

${class='community_logo'}$

Website: https://misp.beamteknoloji.com
Sector: Various
Nationality: Turkey

We want to increase the protection by sharing the threat information we have obtained from the companies we support with all members.

Contact: contact@beamteknoloji.com

${class='community_logo'}$

Website: https://www.cssa.de/
Sector: Industry
Nationality: Germany

CSSA was founded in November 2014 by seven major German companies as an alliance for jointly facing cyber security challenges in a proactive, fast and effective manner. Their community uses MISP as core software and to interconnect with others.

ICS-CSIRT.io

${class='community_logo'}$

Website: https://misp.ics-csirt.io/
Sector: Industry
Nationality: International

ICS-CSIRT.io is a community effort to disseminate security information on Industrial Control Systems. ICS-CSIRT.io is not affiliated or linked with a governmental or commercial partner. Membership of ICS-CSIRT.io is free and grants you access to a MISP and OpenCVE instance. In return for membership we ask you to submit content to the ICS threat data.

Contact: info@ics-csirt.io

SecureGRID Alliance

${class='community_logo'}$

Website: https://securegrid.lac.co.jp
Sector: Various
Nationality: Japan

The SecureGRID Alliance is a cooperative framework for linking threat information between organizations that is free to join. Organizations participating in the alliance can mutually search MISP, which accumulates threat information provided by each alliance member organization, through a web portal site. By utilizing this framework, participating organizations will be able to have automatic analysis functions, strengthen information sharing and collaboration systems, and improve their own security levels and incident response capabilities.

Adding your community to the list

You can add your community to the list by doing a Pull Request on the Community Metadata json file. Alternatively contact us by email and specify name, uuid, rg_uuid, org_name, description, url, sector, nationality, type, email, logo, pgp_key, misp_project_vetted, scope_of_data_to_be_shared.

MISP Feed Communities

MISP integrates a functionality called feed that allows to fetch directly MISP events from a server without prior agreement. Two OSINT feeds are included by default in MISP and can be enabled in any new installation. Providers and partners can provide easily their feeds by using the simple PyMISP feed-generator. For more information, an article about "Using open source intelligence feeds, OSINT, with MISP".

CIRCL OSINT Feed

CIRCL provides a MISP OSINT feed from various sources including their own analysis.

MISP URL location is https://www.circl.lu/doc/misp/feed-osint.

Botvrij.eu OSINT feed

Botvrij.eu provides a MISP OSINT feed out of public report.

MISP URL location is https://www.botvrij.eu/data/feed-osint.

38 KiB Executable File Raw Blame History Unescape Escape

type: page title: MISP Communities and MISP Feeds permalink: /communities/ toc: true

Known Existing and Public MISP Communities

CIRCL Private Sector Information Sharing Community - aka MISPPRIV

CIRCL financial information sharing community - aka Financial Sector MISP sharing groups

CIRCL n/g CSIRT information sharing community - aka MISP

COVID-19 MISP community

CiviCERT MISP Community

Danish MISP Community

FIRST MISP Community

NATO MISP Community

PISAX - pan-European Information Sharing and Analysis Center (ISAC) to IXPs and GRXs

X-ISAC sharing community

BEAM SOC MISP Community

CSSA Cyber Security Sharing & Analytics (CSSA)

ICS-CSIRT.io

SecureGRID Alliance

Adding your community to the list

MISP Feed Communities

CIRCL OSINT Feed

Botvrij.eu OSINT feed

38 KiB

Executable File

Raw Blame History