The Polarity MISP integration allows Polarity to search your instance of MISP to return valid information about domains, IPs, and hashes. The integration also allows you to add and remove tags from events.
URL of your MISP instance to include the schema (i.e., https://) and port if applicable
https://my-misp-server.internal
The authentication of the automation is performed via a secure key available in the MISP UI interface. Make sure you keep that key secret as it gives access to the entire database! The API key is available in the event actions menu under automation
If checked, users can add tags to an event from the Overlay Window
Note that we recommend setting this option as an admin only option so the value is consistent across all your users.
If checked, users can remove tags from an event from the Overlay Window
Note that we recommend setting this option as an admin only option so the value is consistent across all your users.
List of domains and IPs that you never want to send to misp
Domains that match the given regex will not be looked up.
IPs that match the given regex will not be looked up.
Installation instructions for integrations are provided on the PolarityIO GitHub Page.
Polarity is a memory-augmentation platform that improves and accelerates analyst decision making. For more information about the Polarity platform please see: