What is MISP and how does this skill use it?

MISP is an open-source threat intelligence platform. This skill uses the PyMISP library to allow Claude to programmatically create, search, and share security events and indicators.

What are the requirements to use this skill?

You need access to a MISP instance (v2.4+), a valid API key, and Python 3.9+ with the pymisp package installed.

Does this skill support STIX 2.1?

Yes, it includes workflows for exporting MISP events in STIX 2.1 format, facilitating seamless data sharing between different security platforms.

Can I automate MITRE ATT&CK mapping with this?

Yes, the skill is designed to apply MITRE ATT&CK technique tags and Galaxy clusters to events automatically for better classification.

MISP Threat Intelligence Sharing

Name: MISP Threat Intelligence Sharing
Author: mukul975

bymukul975

•

4,120

•

Seguridad y Pruebas

Automates the creation, enrichment, and sharing of threat intelligence events on the MISP platform using PyMISP.

This skill enables Claude to manage the full lifecycle of threat intelligence within the Malware Information Sharing Platform (MISP). By leveraging the PyMISP library, it allows for the programmatic creation of events, management of structured Indicators of Compromise (IOCs) such as IP addresses and file hashes, and enrichment with MITRE ATT&CK tags and TLP markings. It is an essential tool for security operations centers (SOCs) looking to automate incident response workflows, synchronize threat feeds, and ensure interoperability through STIX 2.1 exports.

Características Principales

01Programmatic event creation and attribute management via PyMISP

02Cross-platform interoperability with STIX 2.1 export support

03Automated enrichment with MITRE ATT&CK and TLP tagging

04Advanced search across existing intelligence repositories

05Threat feed synchronization and automated IOC ingestion

064,120 GitHub stars

Casos de Uso

01Standardizing threat data exports for security orchestration and automation

02Synchronizing internal threat intelligence with community-shared MISP instances

03Automating IOC ingestion during active incident response investigations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills performing-threat-intelligence-sharing-with-misp

For use in Claude.ai and ChatGPT

Características Principales

01Programmatic event creation and attribute management via PyMISP

02Cross-platform interoperability with STIX 2.1 export support

03Automated enrichment with MITRE ATT&CK and TLP tagging

04Advanced search across existing intelligence repositories

05Threat feed synchronization and automated IOC ingestion

064,120 GitHub stars

Casos de Uso

01Standardizing threat data exports for security orchestration and automation

02Synchronizing internal threat intelligence with community-shared MISP instances

03Automating IOC ingestion during active incident response investigations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills performing-threat-intelligence-sharing-with-misp

For use in Claude.ai and ChatGPT