MISP VS CyberChef

🔗 https://www.misp-project.org/

MISP (Malware Information Sharing Platform) is an open-source threat information platform that facilitates the collection, storage and distribution of threat intelligence and Indicators of Compromise (IOCs) related to malware, cyber attacks, financial fraud or any intelligence within a community of trusted members.

I was working with MISP[0], an open-source threat intelligence sharing platform, and came across a really interesting dataset from the Australian Strategic Policy Institute on China's technology research institutions[1]. I liked the data so much I built a quick cross-filter visualization on top of it to help explore it[2].

The data offers a fairly comprehensive and interesting perspective on China's research priorities and organization, I can't speak to the effectiveness of the programs themselves, but it does make me concerned that we falling far behind in many areas, including cyber security.

[0] https://www.misp-project.org/

MISP is an open-source solution to streamline the acquisition, retention, distribution, and collaborative exchange of critical cybersecurity indicators and threats. Timely-Lychee-5204 considers it "a threat intelligence platform for gathering, sharing, storing, and correlating indicators of compromise."

MISP https://www.misp-project.org/

It sounds like you want to jump into game development before learning how to write "Hello, world!". Try using any of the open source tools that already do this and sign up for some "free" threat intel tools and learn the lay of the land. https://www.misp-project.org/ https://github.com/OpenCTI-Platform/opencti https://iplists.firehol.org/ https://www.greynoise.io/

Yes but … the frontend/ui is still trying to check the health of each process by checking in /proc/{PID} like in previous and shows that the process maybe start but it couldn’t check if it’s alive or not. An issue was created and we’re waiting for the patch to be integrated in a future version.

🔗 https://gchq.github.io/CyberChef/

So easy a fancy webpage could do it. https://gchq.github.io/CyberChef/

I mean, it's from gchq so it is a bit fancy. It's got a "magic" option!

Cool thing being you can download it and run it yourself locally in your browser, no comms required.

CyberChef

I tend to use CyberChef for this sort of thing: https://gchq.github.io/CyberChef/

I like CyberChef for having a whole bunch of such tools bundled into one page: https://gchq.github.io/CyberChef/

Note: It's made by the UK equivalent of the NSA

I have Cyberchef locally, just unzip it and run. It has an auto function that I only manage to get working by mistake. So as is said above just learn that instead.

Here is a diff example: https://gchq.github.io/CyberChef/#recipe=Diff('%5C%5Cn%5C%5C...

CyberChef