MISP Project @MISPProject@mastodon.opencloud.lu

Slides are published on #CogSecCollab site :)
https://cogsec-collab.org/talk/2020_eu_attack/ …

Shuffle — an Open Source SOAR platform
https://medium.com/security-operation-capybara/introducing-shuffle-an-open-source-soar-platform-part-1-58a529de7d12 … Check out the demo at
https://shuffler.io/login 

We are very proud to announce the schedule of this so special VIRTUAL #pts20 edition! You are going to be able to follow 15 talks about Free Software & Security grouped in 6 sessions (Detect & Defend, Securing Boxes, Cyborgs etc). Enjoy! :)
https://2020.pass-the-salt.org/schedule/ pic.twitter.com/oFsjTqRrlA

The #EUATTACKworkshop is again truly an oitstanding source of inspiration!

As an outcome of two excellent talks on Att&ck like matrices for the telco sector, the Bhadra framework (
https://arxiv.org/pdf/2005.05110.pdf …) is now part of the @MISPProject galaxies.

Thanks for all the ideas!pic.twitter.com/kaIalpiZq7

How easy is to create an @MITREattack like matrix in MISP? @Iglocska did it live during the #EUATTACKworkshop - don't hesitate to contribute new ones in MISP.

https://github.com/MISP/misp-galaxy/commit/43703f1a96f50d526d6d5ea2913d054baf47c8fa …
https://twitter.com/Iglocska/status/1262762417945116673 …

Released during the #EUATTACKworkshop: Visualizing ATT&CK data is now a click away in the #Maltego Transform Hub - thanks to @MITREattack, @MISPProject and @MaltegoHQ !pic.twitter.com/hxP6HNteQT

Don't miss this talk :) Very informative and interesting talk from @VV_X_7 and @bodaceacat about "AMITT - Adversarial Misinformation Playbooks" using @MISPProject, @TheHive_Project and @atc_project #EUATTACKworkshop @MITREattack @MITREengenuitypic.twitter.com/pjCv9A9Jub

The latest version of ThreatIngestor works well with @MISPProject.

https://pypi.org/project/threatingestor/ …
Thanks @InQuest guys for kindly reviewing my PRs.

Interesting intervention by @adulau on MiSP Galaxy2.0 and how it will Map and relate all the models inc Att&Ck framework #EUATTACKworkshoppic.twitter.com/4AESgFR2Pd

Indeed, slides are available here
https://github.com/MISP/misp-training/blob/master/x.9-eu-attack-community/slide.pdf …

Very interesting that Bank of England (@bankofengland) is using MISP (@MISPProject) as a TIP. A great talk from James Morrin on how ATT&CK is improving SOC Operations! @adulau @MITREattack #EUATTACKworkshoppic.twitter.com/TP3UgQXStY

Great talks at
#euattackworkshop
@adulau @Cyb3rWard0g @olafhartong @andriinb @bareiss_patrick

All slides will be released after the workshop

https://www.attack-community.org/event/ 

As said in my talk, future Sigma related announcement will be published via the twitter account @sigma_hq

Love the #AMITT Galaxy shout out by @MISPProject at #EUATTACKworkshop
https://twitter.com/ZeinaZakhour/status/1262352011305107456 …

If you are using MISP-maltego (@MaltegoHQ) , don't forget to update to the latest version. A security vulnerability has been fixed.
https://cve.circl.lu/cve/CVE-2020-12889 … Thanks to @cvandeplas for the responsive vulnerability handling.

I’ll do a quick update Today at #euattackworkshop on @MITREattack and @MISPProject what are the current functionalities in MISP but also the future features to interlink and share intelligence using different models (ATT&CK and others).

Microsoft makes its threat indicators on #COVID19 themed #cyberattacks open source

Don’t forget to add this to your MISP feeds and start hunting

#cybersecurity #infosec
@MISPProject

https://www.securityweek.com/microsoft-open-sources-covid-19-threat-intelligence … via @SecurityWeek

Pull our open-source COVID threat intelligence feed from a @MISPProject instance into @Azure Sentinel
https://www.microsoft.com/security/blog/2020/05/14/open-sourcing-covid-threat-intelligence/ …

I that Microsoft is sharing this intelligence via @MISPProject for defenders that don't have access to the Graph API.
https://twitter.com/rickhholland/status/1261067975274180608 …

2. Set up a MISP server to ingest feeds and forward them to #AzureSentinel
https://techcommunity.microsoft.com/t5/azure-sentinel/integrating-open-source-threat-feeds-with-misp-and-sentinel/ba-p/1350371 …
https://twitter.com/sarahfender/status/1261038408643694593 …

It’s awesome that @Microsoft is sharing this intel in a #MISP consumable format!
https://twitter.com/msftsecintel/status/1260997053213220864 …