FOSStering an ISAC: Enabling a Community with Open-Source Tools

Timely, actionable intelligence is crucial to defending against the latest threats. In an active sharing community, you need a way to collect, normalize, enrich, and vet the shared intelligence at scale while keeping in mind the varying maturity, resources, and staffing of teams amongst membership. Most will have different intelligence requirements and flexibility is demanded to tailor to the disparate use-cases and existing workflows they may have. This demonstration will go over the Retail & Hospitality ISAC  MISP community instance and showcase how members leverage it, along with other free and open-source software, to address these topics and more!