MISP

The MISP connector imports threat intelligence from MISP (Malware Information Sharing Platform) instances into OpenCTI. It enables organizations to leverage existing MISP threat intelligence feeds, events, attributes, objects, and galaxies within the OpenCTI platform. The connector supports incremental imports, custom filtering by tags, organizations, and event types, and maintains full traceability between MISP and OpenCTI entities.