DocIntel & MISP - Threat Intelligence Without Boiling the Ocean
In this three part series Cosive’s Shanna Daly will introduce you to DocIntel, a new centralised knowledge base for your threat intelligence. You’ll learn how to install and configure DocIntel and how to ingest and organise threat intel feeds. Shanna will share ideas and use cases that highlight the immense potential of DocIntel. And finally, you’ll learn how to integrate DocIntel with MISP to make it even more useful.
Cyber Threat Intelligence (CTI) Crash Course
Cybersecurity is such a broad domain with so many different areas of expertise that it’s tough to be across them all.We all have known unknowns in the field, and none of us can be experts in everything.That’s why we’re kicking off our “Crash Course” series, where we’ll be diving into different areas of cybersecurity and answering the most common questions about the field.
Establishing a Threat Intel Program: Principles for Security Leaders
One of the more frequent conversations we have with security leaders is how to establish a new threat intelligence program in their organisation. In these conversations there are a few basic principles that we cover because they’re applicable to almost everyone. We’re sharing these principles publicly so that more organisations can learn about our threat intel philosophy and avoid the most common mistakes that can lead to failed programs.
How ChatGPT Could Transform the CTI Analyst Role
The interview in this post is taken from Episode 004 of the Cosive Podcast, where Cosive CTO Chris Horsley sat down with Tash Postolovski to talk about the implications for AI tools like ChatGPT on the future of the CTI Analyst role.
7 MISP Best Practices: Lessons from Effective Threat Intel Teams
MISP is a powerful open source threat intelligence and sharing platform used by countless SOC teams around the world. Getting a barebones MISP instance up and running is well within the skill-set of most SOC teams. Download MISP, run it on a VM, and log in to the MISP admin console using default credentials… all within about 10 minutes. That part is easy. Now for the hard part: how do you get from a barebones MISP install to actually using MISP to solve real-world cybersecurity problems? Making that leap can be much more complex and challenging than it may seem on the surface.
What is MISP? The Ultimate Introduction
We have extensive experience working with MISP at Cosive. We also offer a managed MISP service. Based on this expertise, we’ve put together this ultimate guide for anyone who wants to understand more about what MISP is, what it does, and how to use MISP.
