MISP darwin is a model and tools to automatically translate in natural language technical or structured information from MISP
Python
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
bin
rules
README.md

README.md

misp-darwin

MISP darwin is a model to automatically translate in natural language technical or structured information from MISP. This allows to convert information contained in MISP to make it readable by human and also actionable beyond standard automatisation aspects. misp-darwin main objectives are:

  • Automatically translating MISP event into human readable reports
  • Adding actions and information to support analysts, security engineers from the indicators shared by other organisations
  • Supporting automatically the translation in various natural language or localized natural languages used in an organisation or in an specific community

This is a Work-in-Progress (WiP) and the format of the rules might still change significantly.

The origin of the darwin name

After an intense chat session between MISP core team members, the model is basically supporting the selection of mapping from structured information to natural languages. So the project is a kind of natural selection and as Charles Darwin popularised the term "natural selection", misp-darwin was a logical consequence.

Requirements

License

This software and rules are licensed under GNU Affero General Public License version 3.

Copyright (C) 2016-2017 Alexandre Dulaunoy Copyright (C) 2016-2017 CIRCL - Computer Incident Response Center Luxembourg