Articles and walkthroughs about zsazsa.
An article that describes how to manage recurring indicator feeds for your SOC and CSIRT. Instead of having multiple Python scripts creating export lists, use zsazsa as the central feed engine.
Channels are destinations, stakeholders are people. A walkthrough of the zsazsa notification model: configuring SMTP once, creating channels per mailbox instead of per person, and how a published product finds its recipients.
A walkthrough of the vulnerability advisory workflow, going from a single CVE to a finished advisory with zsazsa and Flowintel. Published on the MISP project website.
A full walkthrough of the daily threat briefing workflow, from source event triage to publishing, showing how zsazsa turns scraper events into a finished briefing without switching between tools. Published on the MISP project website.