¶ Observatory | Threat Intelligence
The Threat Intelligence page of the SENTINEL Observatory provides access and monitoring of a number of open security data sharing platforms with the added capability of sharing incident or breaches and propagating the data to the appropriate third parties or communities.
¶ Context
Users can consult this page and access information about recently identified data and privacy breaches, you can also report an incident that you faced and contribute back to the community. This page is supported by two different instances of the Malware Information Sharing Platform (MISP), which is an open source threat intelligence platform. By browsing the list of provided threats, you can select or directly search for a specific topic that you believe might affect your organisation.
Each table entry is an incident which refers to a specific event that involves security-related incidents, such as a cyberattack, data breach, or any other noteworthy security event. Each of the incidents can contain multiple attributes, which refer to a specific piece of information associated with an event or an indicator of compromise (IOC).
¶ Procedure
- Click "Threat intelligence" in the Main Menu
- The landing page of this topic opens in the Sentinel MISP Instance incidents.
- You can also view the MISP instance of another EU-funded project: https://www.concordia-h2020.eu/
- You can search for a specific topic or IoC from the Search filter
- When an interesting topic has been found, you can open it and investigate its relevant attributes.
- You can report a new incident that you might have faced.
- You can contribute to an existing incident by adding a new attribute. (The exact theat info/data that you faced)
¶ Prerequisites
A technical background greatly facilitates the comprehension and interpretation of this page.
Previous topic:CyberRange
Next topic:knowledge-base