Integration Details

ThreatQuotient provides the following details for this integration:

Introduction

MISP provides a series of warning lists for the detection of known valid domains. This is selection of COVID-19 related whitelist feeds.

The integration provides the following feeds:

• MISP Warning List - COVID-19 CTC Whitelist - ingests a list of valid COVID-19 related domains provided by the Cyber Threat Coalition.
• MISP Warning List - COVID-19 Domains - ingests a list "maintained using different lists (such as Jaime Blasco's and Krassimir's lists)."

The integration ingests indicators and indicator attributes into the ThreatQ platform.  

Installation

Configuration

ThreatQuotient does not issue API keys for third-party vendors. Contact the specific vendor to obtain API keys and other integration-related credentials.

To configure the integration:

1. Navigate to your integrations management page in ThreatQ.
2. Select the OSINT option from the Category dropdown (optional).

   If you are installing the integration for the first time, it will be located under the Disabled tab.

3. Click on the integration entry to open its details page.
4. Review any additional settings, make any changes if needed, and click on Save.
5. Click on the toggle switch, located above the Additional Information section, to enable it.

ThreatQ Mapping

    {
        "description": "The Cyber Threat Coalition's whitelist of COVID-19 related websites.",
        "list": [
           "2019novelcoronavirusoracle.com",
           ...
        ]
    }

    {
        "description": "Maintained using different lists (such as Jaime Blasco's and Krassimir's lists).",
        "list": [
            "3d.nicovideo.jp",
            ...
        ]
    }

Average Feed Run

Object counts and Feed runtime are supplied as generalities only - objects returned by a provider can differ based on credential configurations and Feed runtime may vary based on system resources and load.

MISP Warning List - COVID-19 CTC Whitelist

MISP Warning List - COVID-19 Domains

Change Log

• Version 1.0.1
  • Updated to account for URL change by the provider
• Version 1.0.0
  • Initial release