Docker Compose is used to automate the deployment and configuration of the containers.Please see the official MISP documentation for properly deploying a secure MISP instance.Īs a few prerequisites, you’ll need to have Docker Compose and Git installed: You can sort by the most recently modified to identify the most active Pulses.Īs a caveat, this will cover a default development deployment of MISP. To subscribe to Pulses, select Browse → Pulses, and then subscribe to any Pulses that you’d like. The Pulse has a summary of the threat, indicators, and various other enrichments that can help you contextually assess the threat in your environment. Pulses are updated at various cadences, but many are daily or even hourly. Once you have an account, you can subscribe to specific OTX community reports and threat data feeds called “Pulses.” These Pulses are retrieved by the Filebeat module and stored in Elasticsearch. To access the OTX API, you simply need to create an account. Additionally, OTX has an Application Programming Interface (API) endpoint that provides a read-only feed which is how the Filebeat module consumes the OTX threat data. OTX allows anyone in the community to discuss, research, validate, and share threat data. This environment provides access to a diverse community of researchers and practitioners. The team over at Alien Labs® has created the Open Threat Exchange (OTX)® as an open threat intelligence community.

Ossim otx