Other
Aperçu
The Import File MISP connector parses MISP JSON export files and converts events, attributes, and objects to STIX 2.1 entities in OpenCTI, mapping tags to labels and galaxy clusters to STIX entities.
The Import File MISP connector is an internal import connector that parses MISP (Malware Information Sharing Platform) JSON export files and converts them to STIX 2.1 entities for import into OpenCTI.
The connector supports:
- Converting MISP events to OpenCTI Reports
- Creating Indicators and Observables from MISP attributes
- Mapping MISP objects to STIX observables
- Preserving MISP tags as labels
- Threat guessing from MISP tags (when enabled)
- Galaxy cluster mapping to STIX entities
This connector enables organizations to import threat intelligence from MISP instances without requiring a direct connection.