サイãƒãƒ¼è„…å¨æƒ…å ±é›†ç´„ã‚·ã‚¹ãƒ†ãƒ EXIST を構築ã™ã‚‹ - setodaNote
2023-01-10 EXIST 㯠VirusTotal ã‚„ Shodanã€Twitte ãªã©ã®æƒ…å ±ã‚’ API を通ã˜ã¦å–å¾—ã—ã€è„…å¨æƒ…å ±ï¼ˆIPアドレスやãƒãƒƒã‚·ãƒ¥å€¤ï¼‰ã®é–¢é€£æƒ…å ±ã‚’æ¨ªæ–çš„ã«æ¤œç´¢ã™ã‚‹ã“ã¨ãŒã§ãる「サイãƒãƒ¼è„…å¨æƒ…å ±é›†ç´„ã‚·ã‚¹ãƒ†ãƒ ã€ã§ã™ã€‚ MISP ã¨é€£æºå¯èƒ½ãªã®ã§ã€ã“ã“ã§ã¯ EXIST+MISP 環境を構築ã—ã¦ã„ãã¾ã™ã€‚ ãªãŠã€CentOS 7 ã«å¯¾ã—㦠EXIST+MISP 環境を自動ã§å°Žå…¥ã§ãるスクリプトを github ã§å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ 手ã£å–ã‚Šæ—©ã環境構築ã—ãŸã„å ´åˆã¯ä»¥ä¸‹ã‹ã‚‰ã”利用ãã ã•ã„。 EXIST+MISP 環境を自動ã§å°Žå…¥ã§ãるスクリプト github.com EXIST+MISP 環境を自動ã§å°Žå…¥ã§ãるスクリプト サイãƒãƒ¼è„…å¨æƒ…å ±é›†ç´„ã‚·ã‚¹ãƒ†ãƒ EXIST ã¨ã¯ CentOS 7 ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« GUI ã‚ã‚Šã®å ´åˆã¯ç”»é¢ãƒãƒƒã‚¯ã‚’無効化ã—ã¦ãŠãã¾ã™ MISP ã®ã‚¤ãƒ³
GitHub - MISP/MISP: MISP (core software) - Open Source Threat Intelligence and Sharing Platform
A complete and robust threat intelligence sharing platform that can be deployed on-premise, in the cloud, or as a SaaS solution, suitable for organizations of all sizes. Threat intelligence, ranging from indicators, through techniques to tactics, can be easily described in MISP, from machine-readable actionable data to detailed reports in Markdown format. A flexible reporting system is integrated
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - ninoseki/mihari: A query aggregator for OSINT based threat hunting
Tools
exist_with_misp_autoinstall/README-JP.md at master · soji256/exist_with_misp_autoinstall
GitHub - InQuest/ThreatIngestor: Extract and aggregate threat intelligence.
GitHub - MISP/misp-taxonomies: Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
{{#tags}}- {{label}}
{{/tags}}