Lex van Roon
Lex van Roon
Found it! Ok, so, we create our misp machines using saltstack. I configured the `/var/log/misp` directory with the sticky bit (1770, root:www-data). This directory gets volume mounted into misp-core at...
As a followup, the same applies to the cluster roles.
The fields that contain PII (UserID, Remote IP, Timestamp, EventCode, EventData) should be hashed. The hashing parameters should be configurable by the operators of OpenKAT, and these operators should also...