MISP Training - Threat Intelligence for Analysts and Administrators

Europe/Zurich
31/3-004 - IT Amphitheatre (CERN)

31/3-004 - IT Amphitheatre

CERN

CERN 385 Route de Meyrin 1217 Meyrin Switzerland
105
Show room on map
Description

The purpose of the training is to reach out to security analysts using MISP as a threat intelligence platform along with users using it as an information sharing platform. This is an opportunity for the users to meet the developers and exchange about potential improvements or use-cases using MISP as a threat-intelligence platform. All software is free and open source.

The MISP training will demonstrate how the platform functions; explain how to share, comment and contribute data, and describe the future developments. This part of the training focuses on the analyst aspect along with the management of your own MISP instance especially how to connect to other MISP communities.

Special emphasis will be given to the integration of MISP with Network Intrusion Detection Systems, in particular Zeek.

Join us for technical talks, demonstrations and discussions about the project, its many applications, and its future.

Prior to this MISP training event, the Zeek (Bro) Workshop Europe 2019 is being hosted by CERN, at the same venue. You can register to the Zeek Workshop using the following URL: https://indico.cern.ch/e/bro-workshop-europe-2019

More information about MISP: https://www.circl.lu/services/misp-malware-information-sharing-platform/

About the MISP project:https://www.misp-project.org - https://twitter.com/MISPProject