A MISP hover plugin which allows you to get knowledge from CrowdSec's CTI API upon hovering an IP in your MISP instance.
Setting up plugin server
The plugin will be soon included in MISP's official plugin repo.
The development version can be found on crowdsec's fork.
Install the fork via by following instuctions given here . Make sure to subsitute repository address as required.
Configure the plugin
Navigate to plugin settings page at http://<your_misp_address>/servers/serverSettings/Plugin
Click on Enrichment.
Set the value of Plugin.Enrichment_crowdsec_enabled to
Set the value of Plugin.Enrichment_crowdsec_api_key to your CTI API key. See instructions to obtain it
Set the value of Plugin.Enrichment_crowdsec_api_version to "v2".
- Simply click on hover button on any IP attribute.
- Upon clicking the hover icon, you would see the knowledge about the IP obtained from CrowdSec's CTI.