MISP Threat Sharing

From GCA ACT
Jump to navigationJump to search

Description

MISP includes a set of public OSINT feeds in its default configuration. The feeds can be used as a source of correlations for all of your events and attributes without the need to import them directly into your system. The MISP feed system allows for fast correlation but also a for quick comparisons of the feeds against one another.


The feeds can be in three different formats:


MISP standardized format which is the preferred format to benefit from all the MISP functionalities. CSV format, allowing you to pick the columns that are to be imported. freetext format which allows automatic ingestion and detection of indicator/attribute by parsing any unstructured text. and located in different input transports:


  • Network (URL)
  • Local (file)

More Information

URL: https://www.misp-project.org/feeds/

Maintenance Status: Active

Last Updated Date: < 1 year

Formats Available: MISP|CSV|TXT

Social Media Links: https://twitter.com/MISPProject

Contact Information: info@misp-project.org

Single or Multiple: Multiple

License Information: AGPL-3.0 License - https://www.gnu.org/licenses/agpl-3.0.en.html