Download

Get zsazsa from GitHub

zsazsa is open source. There are no binaries; you clone the repository and install it on top of your existing MISP infrastructure.

Clone the repository

The official source lives on GitHub under cudeso/zsazsa. Clone it as the www-data user inside your MISP custom application directory.

cd /var/www/MISP/misp-custom
sudo -u www-data git clone \
  https://github.com/cudeso/zsazsa/ zsazsa
cd zsazsa
sudo -u www-data bash docs/install.sh
Open on GitHub Download ZIP

What you need first

zsazsa sits on top of MISP and does not install it for you. Have these ready:

  • A MISP server to store CTI program data (MISP_WEBAPP_URL)
  • A MISP server running misp-scraper (MISP_URL)
  • Optional additional MISP servers as supplementary feeds
  • Python, able to create a virtual environment

See the full installation guide →

Licence & support

Open source, community-driven

zsazsa is released under an open-source licence. Bug reports, feature requests and pull requests are welcome on GitHub. Issues and discussions are the best place to get help and to follow the project's direction.

Issues

Report bugs and request features in the GitHub issue tracker.

Open issues →

Source & releases

Browse the code, releases and commit history on GitHub.

View repository →

Licence

See the LICENSE file in the repository for the full terms.

Read the licence →

Installed it? Configure your MISP connections next.

Point zsazsa at your webapp and scraper MISP servers, then start collecting and producing.

Configuration guide Explore features