AnsweredAssumed Answered

Integrating NetWitness with MISP

Question asked by Jeremy Kerwin on Dec 9, 2017
Latest reply on Apr 8, 2019 by Eric Partington

Has anyone gone about integrating MISP with NetWitness?

I'm thinking about doing it and would be curious about other people's experiences and workflows.

I see a two way integration:
1) Going Hunting and finding meta that you would store as an event in MISP

2) Indicators stored in MISP being used as Feeds to enrich Meta within NetWitness.

 

Cheers.

Outcomes