智盾情报中枢
原名：building-threat-intelligence-platform
设计并部署威胁情报平台（TIP），整合MISP、OpenCTI等开源工具，构建统一系统，实现情报采集、分析与分发，支持STIX/TAXII互操作及分析师仪表板。
- 分类
- 开发提效
- 版本
- v1.0
- 作者
- 弈韬(@ra1nzzz)
- 下载
- 2
- 收藏
- 0
- 发布
- 2026-08-18
- 更新
- 2026-08-25
- TRACE 评分
- 3.4 / 5
内容概览
Building a Threat Intelligence Platform (TIP) involves deploying and integrating multiple CTI tools into a unified system for collecting, analyzing, enriching, and disseminating threat intelligence. This skill covers designing TIP architecture using open-source tools (MISP, OpenCTI, TheHive, Cortex), configuring feed ingestion pipelines, establishing enrichment workflows, implementing STIX/TAXII interoperability, and building analyst dashboards for CTI operations. - When deploying or configuring building threat intelligence platform capabilities in your environment - When establishing security controls aligned to compliance requirements - When building or improving security architecture for this domain - When conducting security assessments that require this implementation - Docker and Docker Compose for deploying platform components - Python 3.9+ with pymisp, pycti, thehive4py libraries…