The MISP Intel connector enables synchronization between OpenCTI and MISP (Malware Information Sharing Platform) instances. It streams data from OpenCTI to MISP in real-time, automatically converting OpenCTI containers (reports, groupings, cases) and their associated STIX objects into MISP events. The connector supports flexible configuration options including distribution levels, threat levels, automatic publishing, and custom tagging. It maintains relationships between entities and supports organization-specific settings, making it ideal for organizations that use both OpenCTI and MISP for threat intelligence management and need to keep both platforms synchronized.
