MISP - Elastic Stack - Docker Lab
MISP - Elastic Stack - Docker This lab explains how to connect MISP to the Elastic Stack in order to leverage IOCs from MISP and trigger alerts based on user defined rules.
Search
Tags
- Alerts
- Bloom-filter
- Cacti
- Cluster
- Cognitive-Security
- Collecting
- Disinformation
- Docker
- EDR
- Elastic
- Elasticsearch
- Filebeat
- Galaxy
- HarfangLab
- IOC
- Import-Script
- Information-Operations
- Integration
- MISP
- MISP-Standard
- Monitoring
- OpenNMS
- SIGINT
- STIX
- SigMF
- Signal-Intelligence
- Threat-Intelligence
- Yeti
- analyst-notes
- analyst-opinions
- automation
- azure
- bot
- crawling
- curation
- edr
- honeypot
- information-sharing
- integration
- jupyter
- kunai
- maltego
- mastodon
- microsoft
- misp-modules
- misp42
- modules
- notebooks
- object
- objects
- playbooks
- poppy
- procedure
- release
- retrosearch
- scraping
- sentinel
- sharing
- splunk