misp-osint-collection/README.md

32 lines
1.5 KiB
Markdown

# misp-osint-collection
This repository describes a process/best-practices to gather OSINT information (such as public report, blog posts, twitter, information, notes) into a [MISP](https://www.misp-project.org) event. The goal is to ensure that the majority of OSINT gathered information in MISP information sharing communities used similar techniques.
# A process with best practices to add OSINT gathered information into MISP
![](https://raw.githubusercontent.com/adulau/misp-osint-collection/master/version-2/OSINT_MISP_almostcomplete.pdf.png)
The document is available in draw.io format and the [source is available](https://github.com/adulau/misp-osint-collection/blob/master/version-2/OSINT_MISP_almostcomplete.xml)).
# TODO
- [ ] Add the steps in a simple JSON/Markdown (to generate the graph/mindmap from the text)
- [ ] Add [improved workflow taxonomy](https://www.misp-project.org/taxonomies.html#_workflow)
- [ ] Add the other source such as MISP information sharing communities where similar information can be found
- [ ] Add the workflow in MISP core software
# How to contribute?
Fork the project, download the [drawio format](https://github.com/adulau/misp-osint-collection/blob/master/version-2/OSINT_MISP_almostcomplete.xml) document, edit the document with drawio, commit and do a pull-request.
# License
~~~
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Copyright (c) 2017-2019 Alexandre Dulaunoy
Copyright (c) 2019 Vincent Falconieri
~~~