MISP/misp-takedown

Name: misp-takedown

Owner: MISP Project

Description: A curses-style interface for automatic takedown notification based on MISP events.

Created: 2017-04-14 13:48:15.0

Updated: 2018-03-02 15:32:37.0

Pushed: 2018-03-02 08:51:39.0

Homepage:

Size: 24

Language: Python

GitHub Committers

UserMost Recent Commit# Commits

Other Committers

UserEmailMost Recent Commit# Commits

README

misp-takedown

A curses-style interface for generating automatic takedown notifications through RT/RTIR using MISP events as input.

Disclaimer

This code is a surprisingly well working result of an experiment. However, the code needs improvements here and there. Also, the installation process regarding urlabuse, uwhoisd, MISP and RT/RTIR is not the most straight forward. We'd be happy to find contributors for code improvements and installation documentation. Both could be part of an internship at CIRCL. Reach out if you are interested.

Requirements

misp-takedown requires a MISP instance (API access) and:

Templates included

A series of notification templates are included, such as:

It can be easily extended to match your abuse notification processes and/or templates.

Demo

What it looks like: video screencast

License

This software is licensed under GNU Affero General Public License version 3


This work is supported by the National Institutes of Health's National Center for Advancing Translational Sciences, Grant Number U24TR002306. This work is solely the responsibility of the creators and does not necessarily represent the official views of the National Institutes of Health.