MISP and TheHive integration
Connecting MISP to TheHive so MISP events arrive as alerts and case observables flow back as MISP events: API keys, import and export modes, update behavior and the paid license needed for more than one MISP server.
MISP integrations
Documented connections between MISP and incident response platforms, threat intelligence platforms and SIEMs, listed on the MISP tools page or in the partner product's own documentation.
MISP and OpenCTI integration
Running MISP for sharing and OpenCTI for analysis side by side: the OpenCTI MISP import connector, the MISP Intel stream connector for the reverse direction, filtering by tag and distribution, and avoiding loops.
MISP and Microsoft Sentinel integration
Pushing MISP indicators into Microsoft Sentinel with misp2sentinel and the STIX objects upload API: Entra app registration, which attributes to send, scheduling and expiry of indicators.
MISP and Splunk integration
Using the misp42splunk app to pull MISP indicators into Splunk searches and correlation, scoping what to retrieve and keeping lookups current, as distinct from the general SIEM and IDS page.
