Technical requirements
The analysis in this chapter uses the MISP TI platform and the SIFT VM installed on VirtualBox. The download and installation of these tools can be done through the following official websites:
MISP and the SIFT Workstation can be a good combination for CTI analysis, especially for Level 1 organizations. However, it has to be noted that several tools can be used for CTI analysis, both open source and commercial. The objective of the use case is to provide a logical flow for analyzing CTI matters.