Pandora SIEM to MISP
1.0
Miscelaneus » pandorafms.pandora_to_mispLast update: 2026-03-06 13:59:03
Description
This plugin automates the exportation of security alerts and threats detected by the Pandora FMS SIEM directly into your MISP (Malware Information Sharing Platform) instance. It bridges the gap between local monitoring and global threat intelligence, streamlining the incident response process.
Additional information
Key Features:
- Real-time Event Creation: Automatically pushes critical SIEM alerts to MISP as structured events using Pandora FMS alert triggers.
- Smart Auto-Triage Engine: Analyzes the raw log data to automatically classify the threat, assign severity levels, and map the attack to the corresponding MITRE ATT&CK framework patterns.
- Automatic IoC Extraction: Intelligently parses alert payloads to extract malicious attacker IPs, instantly creating actionable network attributes within the MISP event.
- Highly Customizable: Allows users to override the auto-classification by passing optional parameters for custom TLP levels (e.g., tlp:red), Distribution/Sharing scopes, and custom MISP tags.
- Detailed Logging: Includes built-in error handling and detailed execution logs for easy troubleshooting.
Tags
Categories
Newest from same author
Newest in same categories
Newest with same tags
