MISP module | Integrations | API | MAC Address Vendor Lookup

MISP module for MAC Vendor Lookup API

MAC address Vendor Lookup API is available as an extension for MISP – Open Source Threat Intelligence Platform. It allows making instant MAC Vendor Lookup for the MAC address attributes. To get vendor details and other information provided by the API, you only need to hover over the MAC address attribute value.

Prerequisites

  1. 1You need a MISP instance up and running. To install and configure it, please refer to the official documentation.
  2. 2Ensure that your misp-modules are up-to-date.

Configuring the extension

  1. 1Log in to your MISP instance Log in to your MISP instance
  2. 2Go to Main menu > Administration > Server Settings & Maintenance Go to Main menu > Administration > Server Settings & Maintenance
  3. 3Click on the Plugin settings tab and select the Enrichment option Click on the Plugin settings tab and select the Enrichment option
  4. 4Enable the module by setting the Plugin.Enrichment_macaddress_io_enabled option to true Enable the module by setting the Plugin.Enrichment_macaddress_io_enabled option to true
  5. 5Provide your API key by setting the Plugin.Enrichment_macaddress_io_api_key value Provide your API key by setting the Plugin.Enrichment_macaddress_io_api_key value

Using the extension

  1. 1Go to Event Actions > Add Event and create an event Go to Event Actions > Add Event and create an event
  2. 2Add a mac-address attribute to the event, and set Value to a sample MAC address Add a mac-address attribute to the event, and set Value to a sample MAC address
  3. 3Move your mouse over the new attribute, and MAC lookup details will pop-up Move your mouse over the new attribute, and MAC lookup details will pop-up

Have questions?

We work hard to improve our services for you. As part of that process we welcome your feedback, questions and suggestions. Please let us know your thoughts and feelings, and any way in which you think we can improve our product.

Shoot us an email to support@macaddress.io or just fill in the contact form.

The data was just refreshed