MISP/misp-galaxy

• highreadme#1

  Reposition the README's opening paragraph to highlight its role as a TI knowledge base

  原因：

  当前

  # misp-galaxy
  MISP galaxy is a simple method to express a large object called cluster that can be attached to MISP events or attributes.

  复制粘贴的修复

  复制

  # MISP Galaxy: Standardized Threat Intelligence Knowledge Base
  MISP Galaxy provides a standardized, extensible knowledge base and taxonomy for threat intelligence entities (such as threat actors, malware, tools, and attack patterns). It enables organizations to organize, share, and attach contextualized threat intelligence clusters to MISP events or attributes, enhancing analysis and information exchange.

  待办完成忽略
• mediumabout#2

  Update the repository description to explicitly state its role as a TI knowledge base

  原因：

  当前

  Clusters and elements to attach to MISP events or attributes (like threat actors)

  复制粘贴的修复

  复制

  A standardized, extensible knowledge base and taxonomy for threat intelligence entities (e.g., threat actors, malware, TTPs) designed to integrate with MISP events and attributes.

  待办完成忽略
• lowlicense#3

  Add a clear statement about the project's license to the README

  原因：

  复制粘贴的修复

  复制

  ## License
  This project is licensed under [Specify the actual license(s) here, e.g., 'a custom license combining Apache 2.0 and MIT components']. Please refer to the `LICENSE` file for full details.

  待办完成忽略

本次扫描解析到的品类 GEO 通道：google/gemini-2.5-flash, deepseek/deepseek-v4-flash

• 品类问题

  How to organize and share threat actor information and attack patterns?

  你：未被推荐
  AI 推荐顺序：

  1. MISP (MISP/MISP)
  2. OpenCTI (OpenCTI-Platform/opencti)
  3. ATT&CK Navigator (mitre-attack/attack-navigator)
  4. CRITS (crits/crits)
  5. ThreatConnect
  6. Anomali ThreatStream

  AI 推荐了 6 个替代方案，却始终没点名 MISP/misp-galaxy。这就是要补上的差距。

  查看 AI 完整回答
• 品类问题

  Tool for integrating and customizing threat intelligence knowledge bases like adversary groups?

  你：未被推荐
  AI 推荐顺序：

  1. MISP (Malware Information Sharing Platform & Threat Sharing) (MISP/MISP)
  2. OpenCTI (OpenCTI-Platform/opencti)
  3. Anomali ThreatStream
  4. EclecticIQ Platform
  5. Recorded Future Security Intelligence Platform
  6. ThreatConnect Platform

  AI 推荐了 6 个替代方案，却始终没点名 MISP/misp-galaxy。这就是要补上的差距。

  查看 AI 完整回答

• Metadata completeness

  pass

• README presence

  pass

• Compared to common alternatives in this category, what is the core differentiator of MISP/misp-galaxy?

  pass
  ⚠AI 未点名 MISP/misp-galaxy —— 很可能在说另一个项目

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• If a team adopts MISP/misp-galaxy in production, what risks or prerequisites should they evaluate first?

  pass
  ✓AI 明确点名了 MISP/misp-galaxy

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• In one sentence, what problem does the repo MISP/misp-galaxy solve, and who is the primary audience?

  pass
  ✓AI 明确点名了 MISP/misp-galaxy

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？