Skip to content

Language / भाषाEnglish is the default.

Topic · 4 lessons

MISP

Model, enrich, correlate and share intelligence responsibly.

Foundations

MISP ExplainedFollow an indicator through structured context, enrichment, correlation and a carefully scoped detection decision.6 minLesson MISP Events, Attributes and ObjectsChoose the right structure for an observation so that related values keep their meaning.6 minLesson MISP Sharing, Sightings and CorrelationSeparate who may receive intelligence from how it should be handled and what a match actually means.6 minLesson MISP APIs and SOC IntegrationBuild a controlled intelligence pipeline that validates, selects and retires data instead of blindly importing everything.6 minLesson

Paths through this topic

SOC analyst foundations

Form a hypothesis, review evidence and explain a proportionate next action.

Threat intelligence and MISP

Build context around indicators, sharing and behavior.

Professional reference

Go directly to deeper discussions of telemetry, evidence, boundaries and limitations.