APTtrail MISP feed

This is a MISP feed directory, not a web page. Add the URL below in MISP under Sync Actions → Feeds → Add Feed, with input source Network and format MISP Feed:

https://trilwu.github.io/apttrail/misp-feed

MISP appends /manifest.json itself. The parts, if you want to look directly:

• manifest.json — 340 events, one per APT group
• hashes.csv — for correlation without pulling events
• <event-uuid>.json — one file per event, listed in the manifest

Event and attribute UUIDs are deterministic, so re-fetching updates events in place rather than duplicating them. Generated 2026-08-15T23:20:53+00:00, rebuilt hourly.

APTtrail · source