MISP Project

Built for the frontlines of cyber defense, our next-generation MISP empowers edge deployments and threat hunters with fast, lightweight, and actionable intelligence, anytime, anywhere.

Modules for expansion services, enrichment, import and export in MISP and other tools.

Clusters and elements to attach to MISP events or attributes (like threat actors)

A small Model Context Protocol (MCP) server for searching the MISP galaxy knowledge base.

BSimVis is a tool to analyze similarities across a collection of binaries, based on Ghidra analyzers and the BSim (Behavioral Similarity) plugin. It provides an API and Web interface to upload large quantities of decompiled binaries and BSim feature vectors to a Kvrocks database for similarity analysis, function diffing, and family clustering.

Python library using the MISP Rest API

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

An online service for converting cyber threat intelligence format, built to promote interoperability and seamless data exchange

MISP website (hugo-based)