Misp-dashboard – MISP Threat Intelligence Dashboard

Misp-dashboard is a dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information.

The misp-dashboard includes a gamification tool to show the contributions of each organisation and how they are ranked over time. The dashboard can be used for SOCs (Security Operation Centers), security teams or during cyber exercises to keep track of what is being processed on your various MISP instances.

Misp-dashboard - MISP Threat Intelligence Dashboard
Misp-dashboard – MISP Threat Intelligence Dashboard

Some of the features included with this dashboard:

  • Possibility to subscribe to multiple ZMQ feeds from different MISP instances
  • Shows immediate contributions made by organisations
  • Displays live resolvable posted geo-locations
  • Provides historical geolocalised information to support security teams, CSIRTs or SOCs in finding threats within their constituency
  • Possibility to get geospatial information from specific regions
  • Shows when and how the platform is used: Login punchcard and contributions over time
  • Shows Contribution vs login
  • Provides real time information to support security teams, CSIRTs or SOC showing current threats and activity Shows most active events, categories and tags
  • Shows sightings and discussion overtime
  • Shows the monthly rank of all organisations, the last organisation that contributed (dynamic updates , the contribution level of all organisations , Each category of contributions per organisation, The current ranking of the selected organisation (dynamic updates)

You can read more and download the dashboard over here: https://github.com/MISP/misp-dashboard

Share
Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments