![]() Your transforms will go through Paterva's servers and ours. ![]() Open the Transform Hub, locate ATT&CK - MISP and press the Install button. Create your entity, enter a keyword such as %gama% and use the Search in MISP transform to get started. The currently supported entities are: AS, DNSName, Domain, EmailAddress, File, Hash, IPv4Address, NSRecord, Person, PhoneNumber, URL, Websiteįor MITRE ATT&CK pivoting, feel free to start with an Attack Technique, Software, Threat Actor, or MISPGalaxy. Once installed you can start by creating a MISPEvent entity, then load the Machine EventToAll or the transform EventToAttributes.Īlternatively initiate a transform on an existing Maltego entity. Quick startĬurrently supported MISP elements are : Event, Attribute, Object (incl relations), Tag, Taxonomy, Galaxy (incl relations). As this is a collaborative project, do not hesitate to propose changes, write other use-cases or raise feature requests for missing features. This user guide should help you through the installation of MISP-Maltego, and should guide you how to use it through a few use-cases. It also allows browsing through the MITRE ATT&CK entities. This is a Maltego MISP integration tool allowing you to view (read-only) data from a MISP instance.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |