665,000+ skills indexed

AxxxxxxaaannCOMMUNITY

Explore all skills by this author →

Verified:GitHub

analyzing-threat-landscape-with-misp

Query a MISP instance to generate a structured JSON threat landscape report.

Updated Aug 27, 2026

Search Tags:#data-analysis #analyze #threat-intelligence #mitre-attack #misp #threat-landscape #ioc-trends

One-click install

npx skills add https://github.com/Axxxxxxaaann/KAIRI-Skills --skill analyzing-threat-landscape-with-misp

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: analyzing-threat-landscape-with-misp
Source: https://github.com/Axxxxxxaaann/KAIRI-Skills/tree/main/skills/analyzing-threat-landscape-with-misp
Command: npx skills add https://github.com/Axxxxxxaaann/KAIRI-Skills --skill analyzing-threat-landscape-with-misp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pymisp, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Analyze threat landscapes by querying MISP instances to produce event statistics, attribute distributions, and actor insights, enabling faster threat understanding.

Core Features & Use Cases

Pull event statistics by date range and threat level to gauge activity
Analyze attribute type distributions (IP, domain, hash, URL) for indicator profiling
Identify top threat actors, malware families, and MITRE ATT&CK techniques via galaxy tags
Track actor activity and trends over time with temporal reports
Generate a consolidated threat landscape report for SOC and threat-hunting workflows

Quick Start

Launch the threat landscape agent against your MISP instance to generate a landscape report.

Frequently Asked Questions about analyzing-threat-landscape-with-misp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I analyze threat landscape trends from MISP data?▼

Analyze threat landscapes by querying MISP instances to produce event statistics, attribute distributions, and actor insights, enabling faster threat understanding.

Can I track MITRE ATT&CK techniques over time using MISP?▼

Identify top threat actors, malware families, and MITRE ATT&CK techniques via galaxy tags to track actor activity and trends over time with temporal reports.

Do I need a MISP API key to generate threat intelligence reports?▼

It relies on PyMISP, a configured MISP URL and API key, and a defined time window to generate a structured JSON report of trends and insights.

How do I profile indicator types like IP addresses and domains in MISP?▼

Analyze attribute type distributions (IP, domain, hash, URL) for indicator profiling to gauge activity and understand threat characteristics.

What's the best way to pull MISP event statistics by threat level?▼

Pull event statistics by date range and threat level to gauge activity and generate a consolidated threat landscape report for SOC and threat-hunting workflows.

Related Skills

Explore More Data & Analytics Skills→

performing-threat-intelligence-sharing-with-misp

Automate MISP event creation, enrichment, and distribution with PyMISP.

threat-hunter

Conduct proactive threat hunting campaigns using MITRE ATT&CK frameworks.

Data Source Mapper

Map MITRE ATT&CK techniques to data sources across SIEM schemas.

threat-modeler

Apply STRIDE, MITRE ATT&CK, and Kill Chain frameworks to identify and model security threats.