The misp-modules service that extends MISP with expansion, import, export and action modules, run alongside the core platform.
Running the misp-modules service and enabling expansion modules such as VirusTotal, Shodan, Passive DNS and DomainTools: API keys, rate limits, which attributes each module enriches and how analysts trigger enrichment.
Using misp-modules import modules for CSV, email and sandbox reports and export modules for YARA, PDF, KQL and CEF, and when the built-in MISP export formats are enough without them.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.