Results for “misp”
17 skills
mukul975 Operationalizing Misp Threat Feeds
Run MISP, curate threat feeds, and auto-generate detections for Wazuh, Sigma, and Suricata.
24.6k · bundle
mukul975 Building Threat Feed Aggregation With Misp
Deploy MISP to aggregate, correlate, and distribute threat intelligence feeds from multiple sources for centralized IOC management and automated SIEM integration.
24.6k · bundle
mukul975 Performing Threat Intelligence Sharing With Misp
Create, enrich, and share threat intelligence events on a MISP platform using PyMISP, including IOC management, feed integration, STIX export, and community sharing workflows.
24.6k · bundle
mukul975 Building Threat Intelligence Platform
Deploy and integrate open-source CTI tools (MISP, OpenCTI, TheHive, Cortex) into a unified threat intelligence platform for collecting, analyzing, enriching, and disseminating threat intelligence.
24.6k · bundle
mukul975 Performing Ioc Enrichment Automation
Automates multi-source enrichment of IPs, domains, URLs, and file hashes using VirusTotal, AbuseIPDB, Shodan, GreyNoise, URLScan.io, and MISP to provide contextual risk scoring and disposition recommendations for SOC analysts.
24.6k · bundle
mukul975 Analyzing Indicators Of Compromise
Triages and enriches indicators of compromise (IPs, domains, file hashes, URLs, email artifacts) from phishing emails, security alerts, or threat feeds, assigning confidence scores and dispositions using VirusTotal, AbuseIPDB, MalwareBazaar, and MISP.
24.6k · bundle
More results
mukul975 Collecting Indicators Of Compromise
Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after security incidents to enable detection, blocking, and threat intelligence sharing.
24.6k · bundle
mukul975 Processing Stix Taxii Feeds
Processes STIX 2.1 threat intelligence bundles from TAXII 2.1 servers, normalizing objects into platform-native schemas and routing them to consuming systems.
24.6k · bundle
mukul975 Correlating Threat Campaigns
Correlates disparate security incidents, IOCs, and adversary behaviors across time and organizations to identify unified threat campaigns and attribute them to common threat actors.
24.6k · bundle
mukul975 Performing Indicator Lifecycle Management
Tracks indicators of compromise from initial discovery through validation, enrichment, deployment, monitoring, and retirement to maintain a high-quality, actionable indicator database.
24.6k · bundle
adobe Incident Response
Investigate and triage runtime incidents involving the Adobe Dispatcher Apache HTTP Server module and related HTTPD configuration in AEM 6.5 LTS environments using MCP tools.
142 · bundle
mukul975 Implementing Threat Intelligence Lifecycle Management
Implement a structured threat intelligence lifecycle encompassing planning, collection, processing, analysis, dissemination, and feedback stages to produce actionable intelligence for organizational decision-making.
24.6k · bundle
mukul975 Managing Intelligence Lifecycle
Guides the end-to-end cyber threat intelligence lifecycle from planning and direction through collection, processing, analysis, dissemination, and feedback to establish or mature a CTI program.
24.6k · bundle
mukul975 Building Threat Intelligence Feed Integration
Automates ingestion, normalization, deduplication, and distribution of threat intelligence feeds from STIX/TAXII, open-source, and commercial sources into SIEM platforms for real-time IOC matching and alerting.
24.6k · bundle
mukul975 Analyzing Threat Intelligence Feeds
Ingests, normalizes, and enriches structured and unstructured threat intelligence feeds into STIX 2.1 format, evaluating feed quality and deduplicating indicators for distribution to SIEM, firewall, and EDR platforms.
24.6k · bundle
mukul975 Automating Ioc Enrichment
Automates enrichment of raw indicators of compromise with multi-source threat intelligence context using SOAR platforms, Python pipelines, or TIP playbooks to reduce analyst triage time and standardize enrichment outputs.
24.6k · bundle
mukul975 Building Ioc Defanging And Sharing Pipeline
Build an automated pipeline to defang indicators of compromise (URLs, IPs, domains, emails) for safe sharing and distribute them in STIX format through TAXII feeds and threat intelligence platforms.
24.6k · bundle