misp-modules icon indicating copy to clipboard operation
misp-modules copied to clipboard

New production environment syslog-mysql scan and read module based on MISP Project IOCs

Open maurorisonho opened this issue 7 years ago • 0 comments

Develop a module that reads and stores in a database separately the logs in a syslog-mysql and checks through the MISP Project's IOCs, if there is any in the syslog-mysql logs found in the analyzed environment, it contains threats based on the MISP Project.

maurorisonho avatar Dec 12 '18 18:12 maurorisonho