Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

MISP connector #12

Closed
mlodic opened this issue Feb 24, 2020 · 1 comment · Fixed by #528
Closed

MISP connector #12

mlodic opened this issue Feb 24, 2020 · 1 comment · Fixed by #528
Labels
new_connector
Milestone
v3.0

Comments

@mlodic
Copy link
Member

mlodic commented Feb 24, 2020 •
edited
Loading

IntelOwl was designed to be integrated with other security tools very easily.
In particular, it is a perfect fit for Threat Intelligence Platforms because it can enrich the data available in those platform and can be customized on its own needs.

So, in order to help the community to achieve this result, we should add new connectors for the most used open source TIPs, for example: MISP

We should study their project and add a relative connector to integrate IntelOwl with MISP.
An idea could be to create a new expansion module (https://github.com/MISP/misp-modules) to allow MISP users to enrich an indicator via IntelOwl and integrate the results on the relative event.
We should leverage the official IntelOwl client for this purpose.
@eshaan7 eshaan7 pinned this issue Aug 26, 2020
@mlodic mlodic mentioned this issue Oct 13, 2020
Closed
@mlodic mlodic mentioned this issue Nov 12, 2020
Closed
@mlodic
Copy link
Member Author

mlodic commented Mar 13, 2021

This is something of really high priority. WE are looking for people who are willing to work on that :)

@sp35 sp35 mentioned this issue Apr 21, 2021
Closed
@sp35 sp35 mentioned this issue Jul 12, 2021
Merged
7 tasks
@sp35 sp35 linked a pull request Jul 12, 2021 that will close this issue
Fixes #12: Add MISP Connector #528
Merged
7 tasks
@sp35 sp35 added the GSoC-2021 label Jul 12, 2021
eshaan7 pushed a commit that referenced this issue Jul 26, 2021
@sp35
Fixes #12: Add MISP Connector (#528)
85834a4 
* Add alpha misp connector

* Add hash check, job tags, config

* Refactor: add md5, mimetype for file and add tlp option

* Add job_id, analyzers executed to misp

* small fixes

* Add monkeypatch and instance url

* mock pymisp

* minor refactor in get hash type

* change docstring of mocks
@sp35 sp35 unpinned this issue Jul 28, 2021
@sp35 sp35 closed this as completed Aug 6, 2021
@eshaan7 eshaan7 mentioned this issue Aug 9, 2021
Closed
@eshaan7 eshaan7 added this to the v3.0 milestone Aug 20, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
new_connector
Projects
None yet
Milestone
v3.0
Development

Successfully merging a pull request may close this issue.

Fixes #12: Add MISP Connector intelowlproject/IntelOwl
3 participants
@eshaan7 @mlodic @sp35