Introduction

In a continuous effort since 2016, CIRCL frequently gives practical training sessions about MISP(Malware Information Sharing Platform & Threat Sharing). The purpose is to reach out to security analysts using MISP as a threat intelligence platform along with users using it as an information sharing platform.

This page includes all the materials used during the training, including slides and a virtual machine, preconfigured with the latest version of MISP.

Next trainings

Next Threat Intelligence summit

TBA

MISP Training Materials

Complementary materials

In complement to the above materials, the overall MISP documentation is available in misp-book. HTML format - PDF format - EPUB format - MOBI/Kindle format

Additional references for taxonomies PDF, object templates PDF and galaxy PDF).

MISP Virtual Machine

(most recent) Available at the following location. The image can be used for production but we highly recommend to change the default credentials and salt pre-configured with such images.. The virtual images are available in VirtualBox and VMWare format.

Login and passwords for the VirtualBox MISP image are the following:

For the MISP web interface -> admin@admin.test:admin For the system -> misp:Password1234

If you want to convert the image from VirtualBox to Parallels:

Get ovftools from VMware: https://www.vmware.com/support/developer/ovf/

Convert image: /Applications/VMware\ OVF\ Tool/ovftool –lax misp-training.ova misp-training.vmx

Open misp-training.vmx in Parallels

It converts and starts the image and it is ready to be used on a DHCP’ed IP address

MISP Community at CIRCL

If you want to connect to the CIRCL MISP community, feel free to contact us.