About TiagoSantos84

Hi,   MISP url is the address of you MISP instance. So you need to install it, create a sync user and put the key of that user in the miner.   Please follow the links provided in previous posts.   Kind regards, Tiago ... View more

Hi @Tony101    It really depends on how the receiver deal with data. There is some platforms that will update the list of IoCs after some amount of time. On the other hand you can try to disable IDS flag on the MISP and delete the IoC on the destination that already receive the IoC as black list. However, you just need to remove IDS flag if you don't have the enforcewarninglist flag active on the query and if you don't have any warninglist feed active.   Please take a look on this: https://github.com/MISP/misp-warninglists like this example (credits from Dev Team MISP): https://your.misp/attributes/restSearch/returnFormat:suricata/publish_timestamp:15d/enforceWarninglist:1 Hope that you can manage it. It's really hard to deal with false positives!     ... View more

Hi @papham,   Try to confirm your auth key..   Certificates installed on misp? Do you have a self signed certificate?   But it should be straight forward.   Kind Regards. ... View more

Hi @slp-security ,   I don't know if I understand your question, but you need to use your MISP url. Prototype parameters # source name, to identify the origin of the indicators inside MineMeld source_name : misp.test # URL of MISP url : https://misp.example.co Please be more specific.   Kind regards, Tiago ... View more

@vhgambit   Hi there,   try: in SYSTEM > EXTENSIONS install the extension using git button (https://github.com/PaloAltoNetworks/minemeld-misp.git)   more details in: https://github.com/PaloAltoNetworks/minemeld-misp ... View more

@lmori   Thank you for your time.   I'm using the VERSION: 0.9.52   Yesterday I removed all the default nodes and it's running since yesterday. However output nodes (taxiiDataFeed) stop when achieve 1000000 elements. How to unlimit the list size?         ... View more

Hi,   Let me ask this. And thank you in advance.   If I have a certificate (.key and .crt) that is recognized in the world, where to put in minemeld taxxi server?   Thank you!   Best Regards ... View more