Integrate MISP Platform about scot

[toddbruner]

Thank you for your comment, although it is odd to open an issue to promote a different system.

MISP primary focus is threat intel and in this it has overlap with SCOT. Where SCOT shines, is marrying the incident response tracking with threat intel development through "Flair". SCOT can immediately highlight if any IOC's in your fresh intel report have ever appeared in your previous alert or incident responses or vice versa, providing instant context to a distributed team of analysts.

Also it is not a binary choice to use MISP or SCOT. SCOT aims to work with any data source to make the job of the incident responder or threat intel analyst easier.

BTW, watch this space, we are awaiting approval to release the next major version of SCOT that will bring new capabilities such as SOAR and a refreshed technology stack.