MISP Intel
Automatic deploy
Supported by Filigran
Other
Overview
Real-time streaming connector that exports OpenCTI containers and their content to MISP events, enabling bidirectional threat intelligence synchronization.
The MISP Intel connector enables synchronization between OpenCTI and MISP (Malware Information Sharing Platform) instances. It streams data from OpenCTI to MISP in real-time, automatically converting OpenCTI containers (reports, groupings, cases) and their associated STIX objects into MISP events. The connector supports flexible configuration options including distribution levels, threat levels, automatic publishing, and custom tagging. It maintains relationships between entities and supports organization-specific settings, making it ideal for organizations that use both OpenCTI and MISP for threat intelligence management and need to keep both platforms synchronized.