MISP | Marketplace

Details
Content
Dependencies
Version History

Download With Dependencies

Malware information and threat sharing platform.

Pack Contributors:

Martin Ohl
nikstuckenbrock

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Pack Contributors:

Martin Ohl
nikstuckenbrock

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Automations

Name	Description
misp_download_sample	Deprecated. No available replacement. Download malicious file sample from MISP.
misp_upload_sample	Deprecated. No available replacement. Upload malicious file sample to MISP.

Integrations

Name	Description
MISP v2 (Deprecated)	Deprecated. Use the MISP v3 integration instead.
MISP v3	Malware information sharing platform and threat sharing.

Integrations

Name	Description
MISP v3	Malware information sharing platform and threat sharing.
MISP v2 (Deprecated)	Deprecated. Use the MISP v3 integration instead.

Pack Name	Pack By
Base	By: Cortex XSOAR

Pack Name	Pack By
Base	By: Cortex XSOAR

2.1.52 - 3398781 (May 13, 2025)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.5.10.3055654.

Related pull requests:
- 39848

Download

2.1.51 - R3318350 (May 6, 2025)

Integrations

MISP v3

Metadata and documentation improvements.

Related pull requests:
- 38986

Download

2.1.50 - R2040490 (January 22, 2025)

Integrations

MISP v3

Fixed an issue where an indicator with a tag defined in the Malicious tag IDs parameter returned a score of unknown instead of malicious.

Related pull requests:
- 38106

Download

2.1.49 - 1950870 (January 8, 2025)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.5.4.1858064.

Related pull requests:
- 37992

Download

2.1.48 - R1741355 (December 3, 2024)

Integrations

MISP v3

Fixed an issue with temporary file cleanup when using certificates.
Updated the Docker image to: demisto/pymisp2:2.5.2.117270.

Related pull requests:
- 37410

Download

2.1.47 - 1590379 (November 4, 2024)

Integrations

MISP v3

Added the Search warninglists parameter in order to search in the warninglists for an attribute.

Related pull requests:
- 36668
- 37055

Download

2.1.46 - 1438938 (September 26, 2024)

Integrations

MISP v3

Add parameter to define tags recognized as benign.

Related pull requests:
- 36399
- 36514

Download

2.1.45 - 1320807 (August 28, 2024)

Integrations

MISP v3

Documentation and metadata improvements.

Related pull requests:
- 36014

Download

2.1.44 - 1259921 (August 11, 2024)

Integrations

MISP v2 (Deprecated)

Maintenance and stability enhancements.

MISP v3

Maintenance and stability enhancements.

Related pull requests:
- 35643

Download

2.1.43 - 1061293 (June 2, 2024)

Integrations

MISP v3

Fixed an issue in Base pack (Version 1.33.52) so now MISP will correctly input email addresses into context under Account.Email and not under Email.

Related pull requests:
- 33924

Download

2.1.42 - 904622 (March 20, 2024)

Integrations

MISP v3

Added the Client Certificate and Private Key parameters.

Related pull requests:
- 33429

Download

2.1.41 - 836299 (February 18, 2024)

Integrations

MISP v3

Added the misp-add-custom-object command.

Related pull requests:
- 32955
- 32881

Download

2.1.40 - 769959 (January 18, 2024)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.183.84720.

Related pull requests:
- 32295

Download

2.1.39 - 747798 (January 8, 2024)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.183.84302.

Related pull requests:
- 32028

Download

2.1.38 - 722180 (December 28, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.182.83631.

Related pull requests:
- 31826

Download

2.1.37 - 7122577 (December 10, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.179.82752.

Related pull requests:
- 31369

Download

2.1.36 - 6960791 (November 22, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.178.80766.

Related pull requests:
- 31054

Download

2.1.35 - R6906425 (November 16, 2023)

Integrations

MISP v3

Added the with_attachments argument to the misp-search-attributes command.
Updated the Docker image to: demisto/pymisp2:1.0.0.78350.

Related pull requests:
- 30230
- 30114

Download

2.1.34 - 6617721 (October 16, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.76097.
Added a check_to_ids configuration parameter to check the to_ids flag when doing a lookup in MISP.
Added a allowed_orgs configuration parameter to filter out results from orgs not on the list.

Related pull requests:
- 30169
- 29376

Download

2.1.33 - 6437102 (September 27, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.75377.

Related pull requests:
- 29867

Download

2.1.32 - 6285754 (September 10, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.73694.

Related pull requests:
- 29570

Download

2.1.31 - 6133197 (August 23, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.68977.

Related pull requests:
- 29147

Download

2.1.30 - 5987442 (August 8, 2023)

Integrations

MISP v2 (Deprecated)

Documentation and metadata improvements.

MISP v3

Documentation and metadata improvements.

Related pull requests:
- 28813

Download

2.1.29 - 5914533 (July 31, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.66985.

Related pull requests:
- 28608

Download

2.1.28 - R5866730 (July 25, 2023)

Integrations

MISP v3

Added the following commands:

misp-add-user
misp-get-organization-info
misp-get-role-info

Related pull requests:
- 28100
- 27410

Download

2.1.27 - R5692327 (July 5, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.63745.

Related pull requests:
- 27607

Download

2.1.26 - 5456534 (June 6, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.62395.

Related pull requests:
- 27242

Download

2.1.25 - 5321969 (May 22, 2023)

Integrations

MISP v3

Updated the Docker image to: emisto/pymisp2:1.0.0.59912.
Updated the value argument of misp-add-attribute command to accept array of values as input.

Related pull requests:
- 25948
- 26695

Download

2.1.24 - 5299536 (May 18, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.59414.

Related pull requests:
- 26615

Download

2.1.23 - R5170573 (May 2, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.56474.

Related pull requests:
- 26170

Download

2.1.22 - 5003495 (April 10, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.54606.

Related pull requests:
- 25782

Download

2.1.21 - 4876645 (March 22, 2023)

Integrations

MISP v3

Added the disable_output argument to the misp-add-tag-to-attribute command. When manually set to true, the command runs faster.

Related pull requests:
- 22978

Download

2.1.20 - 4872060 (March 22, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.50230.

Related pull requests:
- 25384

Download

2.1.19 - 4746941 (March 5, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.49473.

Related pull requests:
- 25015

Download

2.1.18 - R4718798 (March 1, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.48162.

Related pull requests:
- 24646

Download

2.1.17 - R4618697 (February 15, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.46386.

Related pull requests:
- 24249

Download

2.1.16 - R4494864 (January 29, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.44875.

Related pull requests:
- 23878

Download

2.1.15 - 4293048 (December 28, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.42265.

Related pull requests:
- 23346

Download

2.1.14 - 4213299 (December 14, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.40807.

Related pull requests:
- 22970

Download

2.1.13 - 4095599 (November 24, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.37400.

Related pull requests:
- 22460

Download

2.1.12 - 4005065 (November 9, 2022)

Integrations

MISP v3

Fixed an issue where the misp-add-email-object command failed parsing eml files due to an old version of pymisp library.
Updated the Docker image to: demisto/pymisp2:1.0.0.37294.

Related pull requests:
- 22088

Download

2.1.11 - 3871235 (October 19, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.35874.

Related pull requests:
- 21772

Download

2.1.10 - 3681802 (September 18, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.34161.

Related pull requests:
- 21281

Download

2.1.9 - 3257461 (July 13, 2022)

Integrations

MISP v3

Added the misp-add-email-object command.

Related pull requests:
- 19879

Download

2.1.8 - 3246939 (July 12, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.31860.

Related pull requests:
- 20003

Download

2.1.7 - 3080614 (June 13, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.30164.

Related pull requests:
- 19518

Download

2.1.6 - 2991541 (May 27, 2022)

Integrations

MISP v3

Added support for the creation_date argument in the misp-create-event command.

Download

2.1.5 - 2890816 (May 9, 2022)

Integrations

MISP v3

Added 2 commands:
- misp-check-warninglist
- misp-set-event-attributes
Added support for the eventinfo argument in the misp-search-events command.
Added support for multiple types for the type search commands like the misp-search-attributes command.

Download

2.1.4 - 2674843 (March 30, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.27777.
Fixed an issue where the misp-add-url-object command failed when url with schema was provided.

Related pull requests:
- 18326
- 20109
- 18345
- 18346

Download

2.1.2 - 2569525 (March 13, 2022)

Integrations

MISP v3

Added the support of Sharing group distribution in the misp-create-event and misp-add-attribute commands.
Added the sharing_group_id argument to the misp-create-event and misp-add-attribute commands.
Updated the Docker image to: demisto/pymisp2:1.0.0.27224.

Download

2.1.1 - 2507216 (March 3, 2022)

Integrations

MISP v3

Added the misp-publish-event command which allows users to publish an event according to a given event ID.

Download

2.1.0 - 2446616 (February 20, 2022)

Integrations

MISP v3

Added the command misp-delete-attribute which allows users to delete an attribute according to a given attribute ID.
Added the is_local argument to the misp-add-tag-to-event command.
Added the is_local argument to the misp-add-tag-to-attribute command.

Download

2.0.6 - 2167894 (December 27, 2021)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.25484.

Download

2.1.52 - 3398781 (May 13, 2025)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.5.10.3055654.

Related pull requests:
- 39848

Download

2.1.51 - R3324525 (May 6, 2025)

Integrations

MISP v3

Metadata and documentation improvements.

Related pull requests:
- 38986

Download

2.1.50 - R2040490 (January 22, 2025)

Integrations

MISP v3

Fixed an issue where an indicator with a tag defined in the Malicious tag IDs parameter returned a score of unknown instead of malicious.

Related pull requests:
- 38106

Download

2.1.49 - 1950870 (January 8, 2025)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.5.4.1858064.

Related pull requests:
- 37992

Download

2.1.48 - R1741355 (December 3, 2024)

Integrations

MISP v3

Fixed an issue with temporary file cleanup when using certificates.
Updated the Docker image to: demisto/pymisp2:2.5.2.117270.

Related pull requests:
- 37410

Download

2.1.47 - 1590379 (November 4, 2024)

Integrations

MISP v3

Added the Search warninglists parameter in order to search in the warninglists for an attribute.

Related pull requests:
- 36668
- 37055

Download

2.1.46 - 1441232 (September 27, 2024)

Integrations

MISP v3

Add parameter to define tags recognized as benign.

Related pull requests:
- 36399
- 36514

Download

2.1.45 - 1320807 (August 28, 2024)

Integrations

MISP v3

Documentation and metadata improvements.

Related pull requests:
- 36014

Download

2.1.44 - 1259921 (August 11, 2024)

Integrations

MISP v2 (Deprecated)

Maintenance and stability enhancements.

MISP v3

Maintenance and stability enhancements.

Related pull requests:
- 35643

Download

2.1.43 - 1063016 (June 2, 2024)

Integrations

MISP v3

Fixed an issue in Base pack (Version 1.33.52) so now MISP will correctly input email addresses into context under Account.Email and not under Email.

Related pull requests:
- 33924

Download

2.1.42 - 904622 (March 20, 2024)

Integrations

MISP v3

Added the Client Certificate and Private Key parameters.

Related pull requests:
- 33429

Download

2.1.41 - 836299 (February 18, 2024)

Integrations

MISP v3

Added the misp-add-custom-object command.

Related pull requests:
- 32955
- 32881

Download

2.1.40 - 769959 (January 18, 2024)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.183.84720.

Related pull requests:
- 32295

Download

2.1.39 - 747798 (January 8, 2024)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.183.84302.

Related pull requests:
- 32028

Download

2.1.38 - 722180 (December 28, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.182.83631.

Related pull requests:
- 31826

Download

2.1.37 - 7122577 (December 10, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.179.82752.

Related pull requests:
- 31369

Download

2.1.36 - 6960791 (November 22, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:2.4.178.80766.

Related pull requests:
- 31054

Download

2.1.35 - 6651140 (October 19, 2023)

Integrations

MISP v3

Added the with_attachments argument to the misp-search-attributes command.
Updated the Docker image to: demisto/pymisp2:1.0.0.78350.

Related pull requests:
- 30230
- 30114

Download

2.1.34 - 6617721 (October 16, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.76097.
Added a check_to_ids configuration parameter to check the to_ids flag when doing a lookup in MISP.
Added a allowed_orgs configuration parameter to filter out results from orgs not on the list.

Related pull requests:
- 30169
- 29376

Download

2.1.33 - 6437102 (September 27, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.75377.

Related pull requests:
- 29867

Download

2.1.32 - 6285754 (September 10, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.73694.

Related pull requests:
- 29570

Download

2.1.31 - 6133197 (August 23, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.68977.

Related pull requests:
- 29147

Download

2.1.30 - 5991552 (August 8, 2023)

Integrations

MISP v2 (Deprecated)

Documentation and metadata improvements.

MISP v3

Documentation and metadata improvements.

Related pull requests:
- 28813

Download

2.1.29 - 5914533 (July 31, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.66985.

Related pull requests:
- 28608

Download

2.1.28 - R5866730 (July 25, 2023)

Integrations

MISP v3

Added the following commands:

misp-add-user
misp-get-organization-info
misp-get-role-info

Related pull requests:
- 28100
- 27410

Download

2.1.27 - 5583312 (June 21, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.63745.

Related pull requests:
- 27607

Download

2.1.26 - 5456534 (June 6, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.62395.

Related pull requests:
- 27242

Download

2.1.25 - 5322446 (May 22, 2023)

Integrations

MISP v3

Updated the Docker image to: emisto/pymisp2:1.0.0.59912.
Updated the value argument of misp-add-attribute command to accept array of values as input.

Related pull requests:
- 25948
- 26695

Download

2.1.24 - 5299536 (May 18, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.59414.

Related pull requests:
- 26615

Download

2.1.23 - R5170573 (May 2, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.56474.

Related pull requests:
- 26170

Download

2.1.22 - 5006477 (April 10, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.54606.

Related pull requests:
- 25782

Download

2.1.21 - 4876645 (March 22, 2023)

Integrations

MISP v3

Added the disable_output argument to the misp-add-tag-to-attribute command. When manually set to true, the command runs faster.

Related pull requests:
- 22978

Download

2.1.20 - 4872060 (March 22, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.50230.

Related pull requests:
- 25384

Download

2.1.19 - R4746941 (March 5, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.49473.

Related pull requests:
- 25015

Download

2.1.18 - R4718798 (March 1, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.48162.

Related pull requests:
- 24646

Download

2.1.17 - R4618697 (February 15, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.46386.

Related pull requests:
- 24249

Download

2.1.16 - 4410080 (January 17, 2023)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.44875.

Related pull requests:
- 23878

Download

2.1.15 - 4293048 (December 28, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.42265.

Related pull requests:
- 23346

Download

2.1.14 - 4213299 (December 14, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.40807.

Related pull requests:
- 22970

Download

2.1.13 - 4095599 (November 24, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.37400.

Related pull requests:
- 22460

Download

2.1.12 - 4005065 (November 9, 2022)

Integrations

MISP v3

Fixed an issue where the misp-add-email-object command failed parsing eml files due to an old version of pymisp library.
Updated the Docker image to: demisto/pymisp2:1.0.0.37294.

Related pull requests:
- 22088

Download

2.1.11 - 3871235 (October 19, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.35874.

Related pull requests:
- 21772

Download

2.1.10 - 3681802 (September 18, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.34161.

Related pull requests:
- 21281

Download

2.1.9 - 3257461 (July 13, 2022)

Integrations

MISP v3

Added the misp-add-email-object command.

Related pull requests:
- 19879

Download

2.1.8 - 3246939 (July 12, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.31860.

Related pull requests:
- 20003

Download

2.1.7 - 3080614 (June 13, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.30164.

Related pull requests:
- 19518

Download

2.1.6 - 2991541 (May 27, 2022)

Integrations

MISP v3

Added support for the creation_date argument in the misp-create-event command.

Download

2.1.5 - 2890816 (May 9, 2022)

Integrations

MISP v3

Added 2 commands:
- misp-check-warninglist
- misp-set-event-attributes
Added support for the eventinfo argument in the misp-search-events command.
Added support for multiple types for the type search commands like the misp-search-attributes command.

Download

2.1.4 - 2674843 (March 30, 2022)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.27777.
Fixed an issue where the misp-add-url-object command failed when url with schema was provided.

Related pull requests:
- 18326
- 18346
- 18345
- 20109

Download

2.1.2 - 2569525 (March 13, 2022)

Integrations

MISP v3

Added the support of Sharing group distribution in the misp-create-event and misp-add-attribute commands.
Added the sharing_group_id argument to the misp-create-event and misp-add-attribute commands.
Updated the Docker image to: demisto/pymisp2:1.0.0.27224.

Download

2.1.1 - 2507216 (March 3, 2022)

Integrations

MISP v3

Added the misp-publish-event command which allows users to publish an event according to a given event ID.

Download

2.1.0 - 2446616 (February 20, 2022)

Integrations

MISP v3

Added the command misp-delete-attribute which allows users to delete an attribute according to a given attribute ID.
Added the is_local argument to the misp-add-tag-to-event command.
Added the is_local argument to the misp-add-tag-to-attribute command.

Download

2.0.6 - 2167894 (December 27, 2021)

Integrations

MISP v3

Updated the Docker image to: demisto/pymisp2:1.0.0.25484.

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	July 19, 2020
Last Release	May 13, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.