MISP/misp-galaxy

View on GitHub

Clusters and elements to attach to MISP events or attributes (like threat actors)

Stars: 639
Forks: 315
Open beginner issues: 0
Indexed issues: 18
Avg merge: 1d 10h
Merged PRs (30d): 23

Dominant language: Python
License: No license data
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

18 open issues indexed

SCOR Clean up Open

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

MISP/misp-galaxy#1296 · Opened Sep 6, 2026
ScalpFox entry in wiper.json is unsourced and collides with a legitimate business name — request source or removal Open

Difficulty 2/5 1-3 hours Newbie friendliness 64/100

MISP/misp-galaxy#1237 · Opened Jul 12, 2026
New galaxy - Splunk detection rules Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

MISP/misp-galaxy#1105 · Opened Oct 22, 2025
topic field in misp-galaxy to group similar concept Open

T: enhancement

MISP/misp-galaxy#1094 · 1 comment · 2 assignees · Opened Aug 27, 2025
Addition of iOS Malware galaxy and update of Android galaxy Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

MISP/misp-galaxy#1066 · 3 comments · Opened Mar 16, 2025
Fix Mustang Panda Mess Open

Difficulty 3/5 1-2 days Newbie friendliness 15/100

MISP/misp-galaxy#1049 · Opened Jan 28, 2025
Indeed, I'll create a new entry in the Tool galaxy and makes a new relationship. Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

MISP/misp-galaxy#1048 · Opened Jan 26, 2025
Consider including cfr-vulnerabilities-exploited meta field Open

T: enhancement

MISP/misp-galaxy#873 · 1 comment · 1 assignee · Opened Oct 13, 2023
Revoked entries included in MITRE galaxies Open

MISP/misp-galaxy#732 · 1 assignee · Opened Jul 11, 2022
Unique identification of threat actors despite referenced in different galaxies Open

S: stale T: enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

MISP/misp-galaxy#515 · 1 reaction · Opened Feb 19, 2020
Translation for some fields Open

S: stale T: enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MISP/misp-galaxy#478 · Opened Nov 19, 2019
deprecate ATT&CK course-of-action and replace by new mitigations Open

S: stale T: enhancement topic: att&ck

Difficulty 4/5 3-5 days Newbie friendliness 28/100

MISP/misp-galaxy#470 · Opened Nov 4, 2019
Solving the issue of threat actor, activity group, campaign and operation Open

S: stale T: enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

MISP/misp-galaxy#469 · 2 comments · Opened Nov 3, 2019
DeTTACT - new galaxy Open

help wanted new galaxy S: stale topic: att&ck

Difficulty 3/5 1-2 days Newbie friendliness 20/100

MISP/misp-galaxy#398 · 2 comments · Opened May 10, 2019
Adding in tools and meta the Malware db from Checkpoint Open

S: stale T: enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

MISP/misp-galaxy#392 · Opened May 1, 2019
Add evaluation of team_size, resource_cost, time_cost and logistical_budget per group Open

S: stale T: enhancement

Difficulty 3/5 1-2 days Newbie friendliness 25/100

MISP/misp-galaxy#366 · Opened Mar 20, 2019
Automatically attach uuids to galaxies pushed without uuids Open

from:training S: stale T: enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

MISP/misp-galaxy#352 · Opened Feb 26, 2019
Add version to the referenced cluster besides the UUID Open

S: needs review S: stale T: enhancement

MISP/misp-galaxy#180 · 1 assignee · Opened Mar 28, 2018

MISP/misp-galaxy

Get new issues in your inbox