Does MISP support ldap authentication or does it rely on other services such as apache? Want to deploy on RHEL9 in production. thanks

Amazing content! Thank you! Would you be able to create a video for using miap github repositories?

Would it be possible to put out a video on how to create dashboards in MISP?

Great video with very good use-cases. Please more sessions like these in the future! :)

Thanks for the video. I wonder if there is some video showing how to add or connect two instances of MISP in one organisation ? I also wanted to ask if there is any material about connecting with other organisations. How to proceed this task from A to Z ? I would be gratefull for any tips. Best regards.

I don't want to be that guy, but you are making all these great trainings and the audio quality is not that good and it is a bummer. There, I said it. Sorry for the criticism.

Informative video on MISP training for threat intelligence! How can MISP help analysts and security professionals stay ahead of emerging threats in a constantly evolving cyber landscape?

INSTALLATION IS A HEADACHE

It's a nice video. I have a question. why would one want to use so many organizations? normally users work in one organization. are you explaining this from a services perspective where you are managing multiple organizations?

can you please make a video regarding the integration of MISP with Splunk??

1:02:00 onwards is useful -> Tagging for myself

First time i struggled to understand English of Alex. It sounding like good session but Language is not legible. Make it proper please. 12 minutes into the session and i already lost it.

CHEF CRISP WUZ HERE!

Can I say, MISP similar to knowledge base from different source, the company can also create a event to contribute it ?

This is great, Do more tutorials about AIL Framework for Beginners. Thank You:)

Not sure if you are monitoring questions, but I had a doubt - If we set up a pull sync on MISP instance B (to pull events from instance A), does A control what events can be pulled from it? I believe one can assign the right distribution (your org only, connected communities etc.) to broadly control what events can be pulled, but we cannot use tags to set the filter rules (i.e. specific tags like tlp:green) on A, like B can on their side? Also, if the distribution is set to 'connected communities' or 'all communities' for all events in A, then basically B can pull all the data from A (if it wants to) in a sync?

Great session, however, I've success to deploy MISP made it up and running, then integrtae the HTTPS with our custom cert. I cannot find a cookbook to integrate MISP with the LDAP/AD at all, tried with multiple ways based on information I found in Github and number of forums, no luck. Please advice. Thank you.

I'm also starting to learn about MISP and its capabilities and was looking to use it with Python is there anywhere one can get the Jupyter notebooks?

Dear, could you please help me with the below questions, thank you 1.Once we deploy MISP as a stand-alone, Where to link MISP to monitor alerts? SIEM/SOAR or EDR , LDAP , AWS or any other? (In other words: If I deploy MISP in server, how does it look for threats in our environment, what logs does it to need to check, what should I link MISP to AWS? LDAP? Any other? To check all the machines) 2.Do MISP gather information from various OSINT tools and compare the risk/threat in our environment ?

Has anyone installed MISP Container on Docker using an AWS EC2 Instance loaded with Ubuntu Version 22.04? I have tried this with CoolAcid misp-docker and Harvard-itsecurity/docker-misp. I checked to ensure everything is installed, up, and running but I can't connect to the MISP Login Page with localhost, IP Address, or Port Number. I have noticed MySQL is not up and running. Should I edit this with a new IP or port number? If so, what file should I edit?

Are the Jupyter notebooks available?

Thanks for posting this! I'm learning about MISP and this is an invaluable resource

Thank you very much for a very nice and detailed approach

Donde está colgado el doc?

Donde está colgado el doc?

Donde está colgado el doc?

ll

Hello, Which version of MISP is the presenter using? The version that I'm using for the training (v. 2.4.155) doesn't : 1. have the "Add Object" icon. Instead the icon's tooltip says "Populate using a Template". 2. There's no "workflow:state=draft" " tag 3. The "Add Reference" for the graph, doesn't recognize the "sends" relationship, (it says "custom") when trying to connect "person:Andrew Ryan" with email, and many more...

Me sumo al comentario anterior. CIRCL tiene alguna comunidad en español?

Is there any method to install MISP in Kali linux VM?

Buenas tardes, Cómo nos podemos tener conocimiento de las sesiones en vivo? Parte 2?

I attended this training on the day, and I'm now coming back to remind myself how to create object references. Thanks for uploading.

how to update the latest feeds ?

Very good overview for admins, thank you for sharing this recording! <3

i9hdct kzbin.info/aero/PLatBUqXIPJGg77ODNDckYbK6hiRP-ERW8

thanks

Freetext option is great here. Multiple IoCs added and type detected automatically. Saved the best til last.

Hi, everyone! I have a problem: MISP defines all attributes of the event as filename instead domain. That event has a lot of attributes and it will hard to change all of them. Is there any solution? (thank you)

Thanks for the help.

For eg if you ingest events from threatingestor feeds and those are read from web / csv, can you choose to ingest one event for each csv row, at the moment It ingests it as a single event. ??? Thanks

here is a guide on how to add events kzbin.info/www/bejne/mHvZpIlnjc-Dmpo

Awesome

why my galaxies are empty? i have the categories and the names, but all the activity in each galaxy is 0

hxxps://www.misp-project[.]org/misp-training/misp-training.pdf

Great introduction video to MISP. Keep up the good work!

Unfortunately, in this training is as good as nothing about how a researcher can search and properly use MISP through the UI. All the user manuals and information I could find in web do not refers on how to use MISP for digesting information but only how to feed it. :(

enabled the feed. but it isn't fetching feeds daily.

Very interesting. Thank you for sharing.

Hi CIRCL Luxembourg, Mr. Alexandre, and Mr. Andras! May I know when you will upload the continuation of this training? Many details were clarified to me because of these 2 sessions and I hope you will share the rest of it. Btw, I am a student and our project is about MISP and Snort. Thank you.

Nice Boblbee hardshell backpack