MISP Guide
MISP is the Open Source Threat Intelligence and Sharing Platform. It’s an extremely popular and powerful tool for threat intelligence. This page is where we share MISP guides, training and resources.
CloudMISP
CloudMISP is our managed MISP service.
What is MISP? The Ultimate Introduction
For many organisations, MISP serves as a repository of knowledge about all the known threats and vulnerabilities an organisation has seen.
By giving this information a consistent structure, the information becomes searchable, making it easier to correlate information across different days, months and years without relying on the memory of security analysts.
MISP vs. STIX: What are the Differences?
If you’ve worked with cyber threat intelligence (CTI) for any length of time, you’ve probably run into one or both of the MISP and STIX data formats.
While their aims are similar, they approach the problem of describing cyber threats in significantly different ways.
Comparing MISP With Other Threat Intel Platforms, Standards and Providers
- MISP vs. OpenCTI
- MISP vs. Anomali ThreatStream
- MISP vs. YETI
- MISP vs. CRITs
- MISP vs. Recorded Future
- MISP vs. ThreatQ
MISP FAQs & Guides
- How to use MISP?
- Deploying MISP on AWS
- Deploying MISP on Kubernetes
- Installing MISP with Docker
- MISP Taxii Push
- MISP Feeds
- MISP YARA Rules