Create a MISP event on a malware incident – dynamic malware analysis #3

cudeso · 2023-02-15T14:40:00Z

The title of the playbook

Create a MISP event on a malware incident – with sample

Purpose of the playbook

Variants of the malware incident playbook can be made with VMRay, Joe Sandbox or Cuckoo.
Similar as #2

External resources used by this playbook

VMRay, Joe Sandbox, Cuckoo, MWDBcore, VirusTotal, OTX, Hashlookup, Mattermost (or Slack), TheHive (optional), DFIR-IRIS (optional)

Target audience

SOC, CSIRT

Breefly list the execution steps or workflow

No response

cudeso added playbook:state=proposal A 'proposal' for a new playbook needs triage This issue has been automatically labelled and needs further triage labels Feb 15, 2023

cudeso self-assigned this Feb 15, 2023

cudeso added the playbook:activity=3 Playbooks for activity 2 label Oct 24, 2023

cudeso closed this as completed in 3f3ab77 Nov 14, 2023

cudeso changed the title ~~Create a MISP event on a malware incident – with sample~~ Create a MISP event on a malware incident – dynamic malware analysis Dec 7, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Create a MISP event on a malware incident – dynamic malware analysis #3

Create a MISP event on a malware incident – dynamic malware analysis #3

cudeso commented Feb 15, 2023 •

edited

Loading

Create a MISP event on a malware incident – dynamic malware analysis #3

Create a MISP event on a malware incident – dynamic malware analysis #3

Comments

cudeso commented Feb 15, 2023 • edited Loading

The title of the playbook

Purpose of the playbook

External resources used by this playbook

Target audience

Breefly list the execution steps or workflow

cudeso commented Feb 15, 2023 •

edited

Loading