Create a MISP event on a malware incident – dynamic malware analysis #3

cudeso · 2023-02-15T14:40:00Z

The title of the playbook

Create a MISP event on a malware incident – with sample

Purpose of the playbook

Variants of the malware incident playbook can be made with VMRay, Joe Sandbox or Cuckoo.
Similar as #2

External resources used by this playbook

VMRay, Joe Sandbox, Cuckoo, MWDBcore, VirusTotal, OTX, Hashlookup, Mattermost (or Slack), TheHive (optional), DFIR-IRIS (optional)

Target audience

SOC, CSIRT

Breefly list the execution steps or workflow

No response

cudeso added playbook:state=proposal A 'proposal' for a new playbook needs triage This issue has been automatically labelled and needs further triage labels Feb 15, 2023

cudeso self-assigned this Feb 15, 2023

cudeso added the playbook:activity=3 Playbooks for activity 2 label Oct 24, 2023

cudeso closed this as completed in 3f3ab77 Nov 14, 2023

cudeso changed the title ~~Create a MISP event on a malware incident – with sample~~ Create a MISP event on a malware incident – dynamic malware analysis Dec 7, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Create a MISP event on a malware incident – dynamic malware analysis #3

Create a MISP event on a malware incident – dynamic malware analysis #3

cudeso commented Feb 15, 2023 •

edited

Create a MISP event on a malware incident – dynamic malware analysis #3

Create a MISP event on a malware incident – dynamic malware analysis #3

Comments

cudeso commented Feb 15, 2023 • edited

The title of the playbook

Purpose of the playbook

External resources used by this playbook

Target audience

Breefly list the execution steps or workflow

cudeso commented Feb 15, 2023 •

edited