Playing with a Threat-Actor explorer (browser-local) from the MISP galaxy dataset

The misp-galaxy dataset contains a lot of details about threat-actor and I wanted to experiment with the new Pivotick library from my colleague.

Navigating over the mess vendor and threat-actor name

We recently introduced in the MISP galaxy the origin of the producer per threat-actor name. So you can filter in the browser per producer directly:

Prototype running and accessible at (everything will run in your browser so you need a decent recent browser):

The source code is available at the following location (and as usual all is open-source):

Some updates including in the threat-actor filtering, graph visualisation (now the flags are there), anchor reference and so on:

You can also filter per number of relationships, sectors and so on.

First release v1.0.0 of threat-actor-explorer