Issues

• Epic: IOC curation & propagation

  enhancementthird-party integration
  MISP/misp-workbench#448 · Filter by author righel opened on Oct 8, 2026
  

• Integration: inbound alert webhooks that report sightings

  enhancementsightingsthird-party integration
  MISP/misp-workbench#447 · Filter by author righel opened on Oct 8, 2026

• Integration: Flowintel cases and case outcome feedback

  enhancementthird-party integration
  MISP/misp-workbench#446 · Filter by author righel opened on Oct 8, 2026

• Integration: vendor API sinks (Sentinel, Defender, CrowdStrike, Elastic)

  enhancementthird-party integration
  MISP/misp-workbench#445 · Filter by author righel opened on Oct 8, 2026

• Integration: Suricata/Snort, Zeek Intel and DNS RPZ outputs

  enhancementthird-party integration
  MISP/misp-workbench#444 · Filter by author righel opened on Oct 8, 2026

• Integration: firewall external dynamic lists (EDL) with URL tokens

  APIenhancementthird-party integration
  MISP/misp-workbench#443 · Filter by author righel opened on Oct 8, 2026

• Integration: TAXII 2.1 server

  APIenhancementthird-party integration
  MISP/misp-workbench#442 · Filter by author righel opened on Oct 8, 2026

• Curation: hit-rate based expiry of indicators

  enhancementsightings
  MISP/misp-workbench#441 · Filter by author righel opened on Oct 8, 2026

• Curation: per-organisation allowlists

  enhancement
  MISP/misp-workbench#440 · Filter by author righel opened on Oct 8, 2026

• Curation: change preview and approval gate before propagation

  enhancementUI
  MISP/misp-workbench#439 · Filter by author righel opened on Oct 8, 2026

• Curation: review queue for low-trust indicators

  enhancementUI
  MISP/misp-workbench#438 · Filter by author righel opened on Oct 8, 2026

• Curation: membership-based deltas with explicit removals

  enhancementfeedsthird-party integration
  MISP/misp-workbench#437 · Filter by author righel opened on Oct 8, 2026

• Curation: detection profiles shared by all outputs

  APIenhancementthird-party integration
  MISP/misp-workbench#436 · Filter by author righel opened on Oct 8, 2026

• Curation: normalise and validate indicators at ingest

  enhancementopensearch
  MISP/misp-workbench#435 · Filter by author righel opened on Oct 8, 2026

• Curation: trust levels per feed, server and organisation

  enhancementfeedsmisp-sync
  MISP/misp-workbench#434 · Filter by author righel opened on Oct 8, 2026

• Curation: confidence scoring and decay, on by default

  enhancementsightings
  MISP/misp-workbench#433 · Filter by author righel opened on Oct 8, 2026

• Curation: consolidated indicators (one record per type + value)

  enhancementopensearch
  MISP/misp-workbench#432 · Filter by author righel opened on Oct 8, 2026

• [feature] AI-assisted Lucene query-builder

  hackathon
  Feature

  MISP/misp-workbench#219 · Filter by author righel opened on Mar 13, 2026

• [feature] create case on flowintel-cm

  APIhackathonthird-party integrationUI
  Feature

  MISP/misp-workbench#89 · Filter by author righel opened on Jun 10, 2025

• [api] migrate to sqlalchemy 2.x

  tech-debt
  Task

  MISP/misp-workbench#37 · Filter by author righel opened on Nov 28, 2024

• [feature] enrich objects

  APImisp-modulesUI
  Feature

  MISP/misp-workbench#30 · Filter by author righel opened on Sep 17, 2024

• [feature] allow users to have custom misp-modules settings

  APIenhancementmisp-modulesUI
  Feature

  MISP/misp-workbench#26 · Filter by author righel opened on Sep 3, 2024

• [bug] handle internal server error / http 500

  APIbug
  Task

  MISP/misp-workbench#11 · Filter by author righel opened on Jul 16, 2024