MISP ioC retrosearch with misp42 Splunk app.
Introduction Hi, in this blog post I am going to share how I have built a framework on Splunk to retrosearch on MISP indicators of compromise.
Search
Tags
- Alerts
- Bloom-filter
- Cacti
- Cluster
- Cognitive-Security
- Collecting
- Disinformation
- Docker
- EDR
- Elastic
- Elasticsearch
- Filebeat
- Galaxy
- HarfangLab
- IOC
- Import-Script
- Information-Operations
- Integration
- MISP
- MISP-Standard
- Monitoring
- OpenNMS
- SIGINT
- STIX
- SigMF
- Signal-Intelligence
- Threat-Intelligence
- Yeti
- analyst-notes
- analyst-opinions
- automation
- azure
- bot
- crawling
- curation
- edr
- honeypot
- information-sharing
- integration
- jupyter
- kunai
- maltego
- mastodon
- microsoft
- misp-modules
- misp42
- modules
- notebooks
- object
- objects
- playbooks
- poppy
- procedure
- release
- retrosearch
- scraping
- sentinel
- sharing
- splunk