misp-osint-collection/README.md

1.5 KiB

misp-osint-collection

This repository describes a process/best-practices to gather OSINT information (such as public report, blog posts, twitter, information, notes) into a MISP event. The goal is to ensure that the majority of OSINT gathered information in MISP information sharing communities used similar techniques.

A process with best practices to add OSINT gathered information into MISP

https://raw.githubusercontent.com/adulau/misp-osint-collection/master/version-2/OSINT_MISP_almostcomplete.pdf.png

The document is available in draw.io format and the source is available).

TODO

  • [] Add the steps in a simple JSON/Markdown (to generate the graph/mindmap from the text)
  • [] Add improved workflow taxonomy
  • [] Add the other source such as MISP information sharing communities where similar information can be found
  • [] Add the workflow in MISP core software

How to contribute?

Fork the project, download the drawio format document, edit the document with drawio, commit and do a pull-request.

License

Copyright (c) 2017-2019 Alexandre Dulaunoy Copyright (c) 2019 Vincent Falconieri

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.