This Integration adds automated hunting capabilities to the MISP platform with McAfee Active Response.
Based on tagging a script will extract suspicious MD5 hashes from an Threat Event and will launch automated McAfee Active Response lookups. If indicators found within the enterprise the script will automatically retag the threat event, add sightings and comments with the findings.