misp-galaxy
MISP-QRadar-Integration
misp-galaxy | MISP-QRadar-Integration | |
---|---|---|
3 | 2 | |
481 | 36 | |
1.2% | - | |
9.8 | 0.0 | |
2 days ago | almost 2 years ago | |
Python | Python | |
GNU General Public License v3.0 or later | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
misp-galaxy
-
Foreign Travel Risks
MISP Threat Actor Galaxy
-
Profiling and Tracking Threat Actors
MISP threat actors galaxy may be of interest: https://github.com/MISP/misp-galaxy
-
Learning about apt groups
https://attack.mitre.org/groups/ this is a solid source. If you want to see the MISP list of threat actors from their service you can look here https://github.com/MISP/misp-galaxy/blob/main/clusters/threat-actor.json . The painful thing about this topic is every security vendor has a different naming convention for the threat actors in question.
MISP-QRadar-Integration
-
Problem with execute MISP integration
Did you see this already? https://github.com/karthikkbala/MISP-QRadar-Integration/issues/5
What are some alternatives?
ThePhish - ThePhish: an automated phishing email analysis tool
PyMISP - Python library using the MISP Rest API
Watcher - Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
misp-warninglists - Warning lists to inform users of MISP about potential false-positives or other information in indicators
threatbus - 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
iocextract - Defanged Indicator of Compromise (IOC) Extractor.
MISP - MISP (core software) - Open Source Threat Intelligence and Sharing Platform
cowrie - Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io
OTX-Suricata - The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
ThreatIngestor - Extract and aggregate threat intelligence.