MISP galaxy export

[adulau]

We are evaluating to include ATC as a MISP galaxy to add it for MISP users. Do you plan to export in this format? or should we do it on our side automatically?

[yugoslavskiy]

Hello @adulau !

Do you plan to export in this format?

Could you please clarify which format do you mean?

I've mentioned here that we are about to split the project into submodules and update the way we process our data (new architecture is on the way). We better continue this conversation when it ready. It's a matter of weeks.

should we do it on our side automatically?

We would be happy to develop solution which would be convenient for all of us. We will have API and probably would be able to provide you with JSON of all entities mapped to each other with links to ATT&CK, or we will just generate such JSON file on each commit to master so everybody would be able to request it from the repo.

Just let me know what solution will be more convenient and efficient in your opinion.