> For the complete documentation index, see [llms.txt](https://cas-cyber.gitbook.io/cas-cybersecurity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence.md).

# Threat Intelligence

<div align="left"><img src="/files/WiZOpN22RrnPxWf2AdQL" alt=""></div>

### MISP Exercises

* [MISP Exercise 1](/cas-cybersecurity/threat-intelligence/misp-exercise-1.md) (Introduction)
* [MISP Exercise 2](/cas-cybersecurity/threat-intelligence/misp-exercise-2.md) (Phising E-Mail)
* [MISP Exercise 3](/cas-cybersecurity/threat-intelligence/misp-exercise-3.md) (Malware Sandbox)
* [MISP Exercise 4](/cas-cybersecurity/threat-intelligence/misp-exercise-4.md) (MISP API)
* [MISP Exercise 5](/cas-cybersecurity/threat-intelligence/misp-exercise-5.md) (Event Graph | MITRE ATT\&CK)
* [MISP Exercise 6](/cas-cybersecurity/threat-intelligence/misp-exercise-6.md) (Sharing Events)
* [MISP Exercise 7](/cas-cybersecurity/threat-intelligence/misp-exercise-7.md) (Expansion modules)
* [MISP Exercise 8](/cas-cybersecurity/threat-intelligence/misp-exercise-8.md) (Warning lists)

### Virus Total Exercises

* [Virus Total Graph Exercise](/cas-cybersecurity/threat-intelligence/virus-total-graph-exercise.md) (Dridex Malware)

### Other Exercises

* [RFI Incoming! ](/cas-cybersecurity/threat-intelligence/rfi-incoming.md)(Stakeholder report)