AnsweredAssumed Answered

Integrating NetWitness with MISP

Question asked by Jeremy Kerwin on Dec 9, 2017
Latest reply on Jan 30, 2018 by Renato Goncalves

Has anyone gone about integrating MISP with NetWitness?

I'm thinking about doing it and would be curious about other people's experiences and workflows.

I see a two way integration:
1) Going Hunting and finding meta that you would store as an event in MISP

2) Indicators stored in MISP being used as Feeds to enrich Meta within NetWitness.

 

Cheers.

Outcomes