provocativo_
back to the arsenal
// arsenal·Blue TeamAdvancedFOSS

MISP/M-I-S-P/

Open-source threat-intelligence sharing platform — IOC management at scale.

Blue Team

$ misp --help

MISP

// what it is

Description

EU-backed platform for storing, sharing, and consuming threat intelligence. Tens of thousands of organizations exchange IOCs and TTPs via private and public MISP instances daily.

// use cases

What people use it for

  • IOC management
  • Threat-intel sharing between teams/orgs

// facts

category
Blue Team
platforms
LIN
license
FOSS
difficulty
Advanced

// related in Blue Team