An interface module for MISP and Iris to automatically enrich IOCs with MISP insight.
Module type : Processor
Min IRIS version required : > 1.4.0
The module is preinstalled and registered by default on IRIS. For a manual installation please see the Installation section of this readme.
Please refer to the IRIS documentation.
The installation can however be done manually if required, either from sources or existing packages (go to step 3.)
- Git clone this repository
git clone https://github.com/dfir-iris/iris-misp-module.git && cd iris-misp-module
- Build the wheel :
python3 setup.py bdist_wheel
- Copy the wheel into the IRIS app docker container
docker cp iris_misp_module-XX-py3-none-any.whl container:/iriswebapp/dependencies/
- Get an interactive shell on the docker :
docker exec -it container /bin/sh
- Install the new package
pip3 install dependencies/iris_misp_module-XX-py3-none-any.whl