Configure MISP Integration in CSAP
Administrators can configure CSAP to post threat intel information from CSAP to the MISP application.
Before you Start
You need to have the View and Create/Update permissions to access the features in the Integrations module.
You must have handy the API key and URL of your MISP account.
Use the following procedure to configure MISP integration in CSAP. While posting alerts, analysts can select MISP and send threat intel.
Steps
Navigate to Management > Integrations.
Select MISP under Third Party Integrations and click Edit.
Enter the Key and URL of your MISP account.
Click Save to save your changes.