MISP
MISP is a collaborative effort for sharing cyber threat intelligence. It provides a free, open-source platform for organizations to collect, store, and disseminate information about threats, vulnerabilities, and indicators of compromise (IOCs).
Creating a MISP connection
Using API Token
To create the connection you need:
- An API Address
- An API Token
Obtaining the credentials
As an Administrator:
- Go to the administration page by clicking on Administration.
- Then go to List Users.
- Click on View on the user you want to create an API token for.
- Click on Add authentication key.
As a User:
- In the MISP dashboard go to My Profile > Auth Keys.
- Click on Add authentication key.
Creating your connection
- In the Blink platform, navigate to the Connections page > Add connection. A New Connection dialog box opens displaying icons of external service providers available.
- Select the MISP icon. A dialog box with name of the connection and connection methods appear.
- (Optional) Edit the name of the connection. At a later stage you cannot edit the name.
- Select API Token as the method to create the connection.
- Fill in the parameters:
- The API Address
- The API Token
- (Optional) Click Test Connection to test it.
- Click Create connection. The new connection appears on the Connections page.