Deploy MISP via Docker and configure feeds from sources like abuse.ch, AlienVault OTX, and CIRCL to aggregate, correlate, and distribute threat intelligence, including automated feed synchronization and STIX/TAXII-based integration with Splunk, Elasticsearch, and SOAR platforms. Use when standing up centralized IOC management or wiring multi-source threat feeds into a SIEM.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-threat-feed-aggregation-with-mispnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-threat-feed-aggregation-with-misp -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-threat-feed-aggregation-with-misp -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/building-threat-feed-aggregation-with-mispgh skill install mukul975/Anthropic-Cybersecurity-Skills building-threat-feed-aggregation-with-mispgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-threat-feed-aggregation-with-misp ~/.claude/skills/building-threat-feed-aggregation-with-misp # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-threat-feed-aggregation-with-misp ~/.agents/skills/building-threat-feed-aggregation-with-misp # Codex, Cursor, Gemini CLI, Copilot, OpenCode