MISP Fundamentals

on YouTube ↗03h 43m

" summary

Live demonstration of the open‑source MISP platform showing how to create events and objects, ingest reports, and extract email/URL/attachment attributes into the MISP data model; workflows include tagging with correlation and taxonomies, linking related events, and building timelines. The session shows automation: background workers, exports, connectors to external feeds and dashboards, and automation and synchronization across instances so many organizations actually share, validate, block and reuse indicators for incident response. Materials and labs are on the project's training repo.

AI-written summary · about

" related talks

• 30mMISP 3 - Teaching an Old Dog New TricksAndras Iklody, Sami Mokaddem · 2023 FIRST Cyber Threat Intelligence Conference
• 35mComing Together Under a Pandemic - Case Study on the COVID-19 MISP Information Sharing CommunityAlexandre Dulaunoy, Andras Iklody · FIRSTCON21 Virtual Edition 2.0
• 38mCruising Ocean Threat With TheHive, Cortex & MISP Without SinkingSaâd Kadhi · BSides Lisbon 2018
• 28mCommunity Management and Tool Orchestration the Open source Way via CerebrateAndras Iklody, Sami Mokaddem · FIRST Cyber Threat Intelligence Symposium 2022
• 27mIndicator Message eXchange (IMX): Enabling Structured Cyber Threat Intelligence SharingBrian DeWyngaert · FIRST Conference 2026 (FIRSTCON26)
• 30mCTI-Transmute: Harmonizing Threat Intelligence in a Multi-Standard EcosystemAlexandre Dulaunoy, Christian Studer · FIRST Cyber Threat Intelligence Conference 2026
• 31mFiltering the Noise: Crafting an Actionable Threat Feed from Community-Shared IntelligenceJJ Josing · FIRST Cyber Threat Intelligence Conference 2026
• 34mCommunity Management and Tool Orchestration the Open-Source Way via CerebrateAndras Iklody, Sami Mokaddem · 34th Annual FIRST Conference 2022