Intelligence Center External Integrations: MISP Feed

The default feed is available as a MISP feed.

It can be added to an existing MISP instance by following MISP's documentation.

The following field values are required for the feed to work properly:

• Input Source: Network
• URL: https://api.sekoia.io/api/v2/inthreat/misp
• Source Format: MISP Feed
• Headers: Authorization: Bearer <APIKEY>
• Enabled: True

You then need to make sure you have a scheduled task in place to regularly fetch the feed's content.

Warning: MISP adds automatically the suffix /manifest.json to the feed URL. If you want to try the connection to the feed outside MISP or make a custom script, you need to use the following URL: https://api.sekoia.io/api/v2/inthreat/misp/manifest.json