eset/malware-ioc

What Happened to MISP import files?

joydragon opened this issue · 3 comments

joydragon commented

I know it might not be as popuar as before, but what happened to the MISP files added with the IOCs?
I was very happy to see you were using that format to share the IOC of the campaigns, but on the last few there are no files like that. Did you stop using MSIP?
Thanks

marc-etienne commented

Hi @joydragon!

Thanks for your feedback. No, we did not stop using MISP. However, it is up to the individual researchers doing the publication to export an event for the GitHub repo. We strongly suggest it, but don't make it mandatory.

That being said I have forwarded your feedback to the team so they know that MISP events are appreciated :). Maybe this will motivate us to do the extra steps next time (or do it for their already published latest research).

  • 👍2
marc-etienne commented

Quick follow up, your voice was heard and MISP event for the InvisiMole research was created and uploaded today: https://github.com/eset/malware-ioc/blob/master/invisimole/misp_invisimole.json

Cheers!

  • 👍1
joydragon commented

Awesome!
Thanks for the great work :)