A new version of MISP 2.4.86 has been released including improvements to the sharing groups and their respective APIs, granular access control of MISP-modules at an instance-level along with the usual set of bug fixes.
There are different use-cases of MISP especially when it comes to large information sharing and exchange communities such as those of ISACs (e.g. X-ISAC or similar organisations. Two main new features were introduced to improve the support of such scenarios:
Sharing groups are now manageable via the API opening up the possibility of creating and managing sharing groups via other applications.
A significant performance improvement (a gain of 50% is quite common) has been incorporated in the latest release when importing large batches of attributes into MISP via the UI or the API. Performance gains have also been made for the attribute index and attribute search, improving lookup times by a factor of 10, due to some silly MySQL indexing behaviors.
Many bug fixes and improvement were introduced in this version.
In addition, MISP dashboard has been significantly improved and can be installed in junction with one or several MISP instances.
PyMISP has been refactored and improved. The PyMISP documentation has been updated PDF.
MISP galaxy, objects and taxonomies were notably extended by many contributors. These are also included by default in MISP. Don’t forget to do a
git submodule update and update galaxies, objects and taxonomies via the UI.
MISP trainings are foreseen the 17/01 and 18/01 in Luxembourg including a full-day API and extension hands-on session. For more information and registration. We have also many other trainings (Vienna in February) and events foreseen in 2018, for more information