--- title: MISP playbook --- %%{init: {"flowchart": {"htmlLabels": false}} }%% flowchart LR JARM[JARM fingerprints] event[MISP event] subgraph MISP[MISP correlations] eventcorrelations[MISP event correlations] feedcorrelations[MISP OSINT feed correlations] end JARM -- MISP objects --> event --> eventcorrelations event --> feedcorrelations eventcorrelations --> summary feedcorrelations --> summary event --> indicators subgraph external[External data providers] censys_aggregated censys_detailed shodan_detailed end event -- API --> censys_aggregated event -- API --> censys_detailed event -- API --> shodan_detailed censys_aggregated --> eventreport censys_detailed -- MISP objects --> eventreport shodan_detailed -- MISP objects --> eventreport eventreport[MISP event report] eventreport --> summary indicators --> summary summary --> mattermost summary["`Display summary in playbook`"] mattermost["`Sent notification to **Mattermost**`"]