March 5, 2024, 4:11 p.m. | /u/StressedOutMouse

For [Blue|Purple] Teams in Cyber Defence www.reddit.com

Hello,

I hope everyone is doing well!

I haven't able to find the answer to this and was hoping to get some guidance here. Is there an ideal way to

1. Maintain the MISP instance so it only has events and attributes for let's say the past 90 days?
2. Pulling only a recent set of data from a data feed like the past day?

Currently I have the feeds for Abuse.ch, CIRCL and CrowdStrike. It's just been a lot …

attributes blueteamsec current data doing events find guidance hello hope instance maintenance misp

Social Engineer For Reverse Engineering Exploit Study

@ Independent study | Remote

DevSecOps Engineer

@ LinQuest | Beavercreek, Ohio, United States

Senior Developer, Vulnerability Collections (Contractor)

@ SecurityScorecard | Remote (Turkey or Latin America)

Cyber Security Intern 03416 NWSOL

@ North Wind Group | RICHLAND, WA

Senior Cybersecurity Process Engineer

@ Peraton | Fort Meade, MD, United States

Sr. Manager, Cybersecurity and Info Security

@ AESC | Smyrna, TN 37167, Smyrna, TN, US | Santa Clara, CA 95054, Santa Clara, CA, US | Florence, SC 29501, Florence, SC, US | Bowling Green, KY 42101, Bowling Green, KY, US