analyzing-threat-landscape-with-misp

What problem does it solve?

Analyze threat landscapes by querying MISP instances to produce event statistics, attribute distributions, and actor insights, enabling faster threat understanding.

Core Features & Use Cases

• Pull event statistics by date range and threat level to gauge activity
• Analyze attribute type distributions (IP, domain, hash, URL) for indicator profiling
• Identify top threat actors, malware families, and MITRE ATT&CK techniques via galaxy tags
• Track actor activity and trends over time with temporal reports
• Generate a consolidated threat landscape report for SOC and threat-hunting workflows

Quick Start

Launch the threat landscape agent against your MISP instance to generate a landscape report.