Pack Contributors:
- Martin Ohl
- nikstuckenbrock
- Charon De Beukelaer
- Ryan McVicar
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.
MISP
- Details
- Content
- Dependencies
- Version History
Malware information and threat sharing platform.
Pack Contributors:
- Martin Ohl
- nikstuckenbrock
- Charon De Beukelaer
- Ryan McVicar
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.
Automations
| Name | Description |
|---|---|
misp_download_sample | Deprecated. No available replacement. Download malicious file sample from MISP. |
misp_upload_sample | Deprecated. No available replacement. Upload malicious file sample to MISP. |
Integrations
| Name | Description |
|---|---|
| MISP v2 (Deprecated) | Deprecated. Use the MISP v3 integration instead. |
| MISP v3 | Malware information sharing platform and threat sharing. |
Integrations
| Name | Description |
|---|---|
| MISP v2 (Deprecated) | Deprecated. Use the MISP v3 integration instead. |
| MISP v3 | Malware information sharing platform and threat sharing. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Aggregated Scripts | By: Cortex XSOAR |
2.2.3 - R7448282 (March 5, 2026)
- 42859
Download
Integrations
MISP v3
- Fixed an issue where indicators in events with ThreatLevelID 1, 2, or 3 (High, Medium, Low) were incorrectly scored as "Unknown" instead of "Bad" when no tags were configured. This was caused by a type mismatch in the threat level comparison logic.
- 42859
Download
2.2.0 - R5469292 (October 20, 2025)
- 41266
- 41270
Download
Integrations
MISP v3
- Added support for misp-get-warninglists command that gets all warninglists from MISP.
- Added support for misp-get-warninglist command that get a specific warninglist by it's ID.
- Added support for misp-change-warninglist command that changes a warninglist in MISP.
- Added support for source argument in the misp-add-sighting command.
- Added support for value argument in the misp-add-sighting command.
- Updated the Docker image to: demisto/pymisp2:2.5.10.3725488.
- 41266
- 41270
Download
2.2.3 - R7448282 (March 5, 2026)
- 42859
Download
Integrations
MISP v3
- Fixed an issue where indicators in events with ThreatLevelID 1, 2, or 3 (High, Medium, Low) were incorrectly scored as "Unknown" instead of "Bad" when no tags were configured. This was caused by a type mismatch in the threat level comparison logic.
- 42859
Download
2.2.0 - R5469292 (October 20, 2025)
- 41266
- 41270
Download
Integrations
MISP v3
- Added support for misp-get-warninglists command that gets all warninglists from MISP.
- Added support for misp-get-warninglist command that get a specific warninglist by it's ID.
- Added support for misp-change-warninglist command that changes a warninglist in MISP.
- Added support for source argument in the misp-add-sighting command.
- Added support for value argument in the misp-add-sighting command.
- Updated the Docker image to: demisto/pymisp2:2.5.10.3725488.
- 41266
- 41270
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | July 19, 2020 | |
| Last Release | April 30, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
