MISP/data-processing

Name: data-processing

Owner: MISP Project

Description: Scripts to process big chunks of data from MISP and do in depth correlations on samples.

Created: 2016-03-13 10:36:59.0

Updated: 2017-06-20 14:04:14.0

Pushed: 2016-07-02 18:44:02.0

Homepage:

Size: 31

Language: Python

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

The project was initiated by Marion Marschalek (G-data) and Raphaël Vinot (CIRCL) for a prensentation at Troopers called THE KINGS IN YOUR CASTLE - All the lame threats that own you but will never make you famous.

The idea is to use the data stored and classified in MISP in order to derivate trends and uncover correlations between events.

Introduction

This repository contains scripts to process data from MISP and help analyse the outputs.

Content

The scripts are sorted by usage, look at the readme files in the sub-directories.

Files

• hashes-extract.sh: Extract all the hashes from JSON dumps.

Directories

• groupping: makes groups of hashes and dump correlations.
• standalone: import all the indicators in a sqlite database