MISP Introduction and Generic Training

Introduction 11:37
Quick introduction to MISP 15:06
MISP Data model 51:33
Best practices when encoding threat intelligence 01:24:26
Encoding demo: Ransomware infection via e-mail 02:06:38
Q&A 02:54:28

[@AV-ct8el]

Hello, Which version of MISP is the presenter using? The version that I'm using for the training (v. 2.4.155) doesn't : 1. have the "Add Object" icon. Instead the icon's tooltip says "Populate using a Template". 2. There's no "workflow:state=draft" " tag 3. The "Add Reference" for the graph, doesn't recognize the "sends" relationship, (it says "custom") when trying to connect "person:Andrew Ryan" with email, and many more...

[@paramveersingh5122]

1:02:00 onwards is useful -> Tagging for myself