# misp-osint-collection

This repository describes a process/best-practices to gather OSINT information (such as public report, blog posts, twitter, information, notes) into a [MISP](https://www.misp-project.org) event. The goal is to ensure that the majority of OSINT gathered information in MISP information sharing communities used similar techniques.

# A process with best practices to add OSINT gathered information into MISP

![](https://raw.githubusercontent.com/adulau/misp-osint-collection/master/version-2/OSINT_MISP_almostcomplete.pdf.png)


The document is available in draw.io format and the [source is available](https://github.com/adulau/misp-osint-collection/blob/master/version-2/OSINT_MISP_almostcomplete.xml)).

# TODO

- [ ] Add the steps in a simple JSON/Markdown (to generate the graph/mindmap from the text)
- [ ] Add [improved workflow taxonomy](https://www.misp-project.org/taxonomies.html#_workflow)
- [ ] Add the other source such as MISP information sharing communities where similar information can be found
- [ ] Add the workflow in MISP core software

# How to contribute?

Fork the project, download the [drawio format](https://github.com/adulau/misp-osint-collection/blob/master/version-2/OSINT_MISP_almostcomplete.xml) document, edit the document with drawio, commit and do a pull-request.

# License

Copyright (c) 2017-2019 Alexandre Dulaunoy
Copyright (c) 2019 Vincent Falconieri

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.