Innomerc Learn
English is the default.
Guided learning path

Threat intelligence and MISP

Build context around indicators, sharing and behavior.

7 lessons · Approximately 43 minutes · Learn at your pace

Before you start: SIEM Explained, IOC vs TTP

  1. IOC vs TTPCompare a specific observable with a pattern of behavior, and see why both need context.6 minLesson
  2. MISP ExplainedFollow an indicator through structured context, enrichment, correlation and a carefully scoped detection decision.6 minLesson
  3. MISP Events, Attributes and ObjectsChoose the right structure for an observation so that related values keep their meaning.6 minLesson
  4. MISP Sharing, Sightings and CorrelationSeparate who may receive intelligence from how it should be handled and what a match actually means.6 minLesson
  5. MISP APIs and SOC IntegrationBuild a controlled intelligence pipeline that validates, selects and retires data instead of blindly importing everything.6 minLesson
  6. MITRE ATT&CK ExplainedUnderstand tactics, techniques and evidence, then explore a versioned map of observed adversary behavior.6 minLesson
  7. Detection Coverage Is More Than an ATT&CK LabelSeparate a mapped analytic from tested visibility and a working response.7 minLesson

Bring it together

Explain one idea from this path in your own words. Revisit any lesson that still feels uncertain; completion is your choice, not a timer.

Review your learning · Choose another path