Use AI to search for threat intelligence events on your MISP server. You can enter a custom prompt to retrieve aggregated information about threats, including IOCs, malware families, and attack patterns.
Note: Before using MISP Search, you must set up the MISP integration. The integration allows Prime Architect to access your MISP server and act as an agent for searching and retrieving threat intelligence data. |
To search in MISP with AI:
Open Prime Architect and go to the Agentic Threat Research mode.
Make sure that the MISP integration is configured.
Enter your prompt into the input field.
Select the Discover button.
Select the MISP Search tool from the agentic AI tools options.
Click the Enter icon to proceed.
Select the tile to view the results.
Next Steps
Once the list of IOCs has been generated, you can:
Copy the output to the clipboard and paste it into your system
Download the output as a file by selecting Save As > File.txt or save to a custom repository by selecting Save As > New Rule.