[beta-1.0] first beta release of misp-workbench

[righel]

MISP Workbench – First Release v1.0 (beta)

MISP Workbench is a powerful analyst-focused platform designed to tame the challenge of working with large volumes of threat intelligence at scale. It is capable of ingesting data from multiple origins — including MISP instances, external feeds, and other threat intelligence sources — and consolidates them into a unified workspace where analysts can actually get things done.
At its core, MISP Workbench puts the analyst in control: query across your entire data corpus, enrich and process indicators, pivot between related intelligence, and push curated results back to MISP or downstream consumers — all from one place. Whether you're triaging a flood of incoming indicators, hunting for patterns across feeds, or preparing a finished intelligence product, MISP Workbench is built to cut through the noise and accelerate the workflow from raw data to actionable insight.

This first beta release marks the foundation of that vision — expect rough edges, rapid iteration, and a strong appetite for feedback.

Main features:

Feature	Description
Feed ingestion	Ingest MISP, CSV, JSON, and Freetext feeds on a schedule or on demand
Correlations	Batch and incremental correlation scans over indexed attributes
Explore	Lucene queries against OpenSearch for fast indicator lookups
Enrichments	IOC enrichment powered by misp-modules
Hunt	Hunts are saved searches that run periodically and trigger alerts.
Notifications	Event-driven notifications processed by Celery workers
REST API	FastAPI backend with automatic OpenAPI documentation
Storage	Garage (S3-compatible) or local filesystem for attachments

---

This discussion was created from the release [beta-1.0] first beta release of misp-workbench.