Automation & MISP Workflows
New video!
Hello there 👋
A new video just dropped 🎁
Be the first to explore it and make the most of the unique insights!
🚨 New MISP livestream tonight!
Most teams treat MISP as a database they fill in by hand. This week I'm going live to change that!
MISP Workflows is the most underused feature in the platform. It turns MISP from a passive store into something that tags, enriches, and governs itself — no analyst babysitting required.
In one hour, I'll build four automations live, from scratch:
→ Auto-tag and enrich every IP the moment it's added
→ Fire a Slack alert the second an event is published
→ A blocking quality gate that stops any event publishing without a TLP marking
→ Push flagged events straight to your automation hub via webhook
No slides-only theory. Real builds on a real instance, including gotchas I've hit so you don't have to. Every blueprint I create will be yours to download and import.
If you run CTI tooling, or you're tired of relying on analyst discipline to keep your intel clean, this one's for you.
📺 Watch live on YouTube tonight
Want to elevate your CTI skills?
Try our tailored one-to-one sessions. These will empower you to develop in-demand skills, achieve your goals, and advance your career!