WEBVTT

00:00:00.240 --> 00:00:05.950
Hello, everyone.

00:00:05.960 --> 00:00:07.120
My name's Phil Chapman,

00:00:07.130 --> 00:00:10.000
and I'm a senior instructor and have been involved in the world

00:00:10.000 --> 00:00:12.450
of intelligence analysis for over 20 years.

00:00:12.450 --> 00:00:15.410
And welcome to this blue team tools course,

00:00:15.410 --> 00:00:20.040
MISP, featuring the open source threat intelligence sharing platform,

00:00:20.050 --> 00:00:22.360
which was developed initially by Christope

00:00:22.360 --> 00:00:25.160
Vandeplas and further enhanced by NATO,

00:00:25.740 --> 00:00:29.810
and it's now maintained by a dedicated team of MISP developers.

00:00:30.540 --> 00:00:34.470
A major part of the threat intelligence cycle is the analysis and

00:00:34.470 --> 00:00:37.430
distribution of credible information tactics,

00:00:37.430 --> 00:00:39.900
techniques, and procedures and exploitations,

00:00:40.100 --> 00:00:43.210
and MISP is one in a series of tools which effectively

00:00:43.210 --> 00:00:46.480
allows for the storing and dissemination of a wide range of

00:00:46.480 --> 00:00:48.230
cyber threat intelligence types.

00:00:48.230 --> 00:00:53.540
MISP, which was previously entitled the Malware Information Sharing Platform,

00:00:53.540 --> 00:00:57.520
now represents a wide threat intelligence platform,

00:00:57.530 --> 00:01:00.140
which is used for sharing, storing,

00:01:00.230 --> 00:01:03.670
and correlating indicators of compromise of targeted attacks.

00:01:04.140 --> 00:01:07.610
This also includes threat intelligence, financial fraud,

00:01:07.620 --> 00:01:11.310
and vulnerability information from many threat actors and techniques.

00:01:11.680 --> 00:01:15.940
In this blue team's course, you'll first learn how to install the platform,

00:01:16.060 --> 00:01:20.470
synchronize inputs, and filter based on your own personal requirements.

00:01:20.640 --> 00:01:24.150
You will then also learn how to input your own instance

00:01:24.160 --> 00:01:26.590
into the platform for further analysis.

00:01:26.940 --> 00:01:30.570
I hope that you'll join me on this journey to learn how MISP can

00:01:30.570 --> 00:01:33.980
fit into your threat intelligence program with your blue team's

00:01:33.980 --> 00:01:36.640
tools MISP course here at Pluralsight.