NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
MISP and OpenCTI Workflows
Model, curate and share intelligence in MISP and OpenCTI without leaking data or flooding consumers with noise.
Room tasks
1The MISP Data Model: Events, Attributes, Objects and Context
2MISP Distribution, Sharing Groups and Publishing
3OpenCTI: A STIX 2.1 Knowledge Graph in Practice
4Curating Intelligence in a Threat Intelligence Platform
5Lab: Triage a MISP Event Before Sharing
Frequently Asked Questions
What is MISP?
MISP is an open-source threat intelligence platform for storing, correlating and sharing indicators and context. Its events, attributes, galaxies and taxonomies help communities exchange structured intelligence.
What is OpenCTI?
OpenCTI is an open-source platform that models intelligence as a knowledge graph using STIX, linking actors, campaigns, malware and indicators. Analysts use it to explore relationships and share reports.
How do I share intelligence without leaking data?
Apply sharing groups, distribution levels and TLP markings, and remove sensitive details first. The Codelivly MISP and OpenCTI room is free and hands-on, teaching careful curation and sharing.