MISP - Malware Information Sharing Platform & Threat Sharing - Training Materials

MISP - Malware Information Sharing Platform & Threat Sharing - Training Materials

Back to Services

  1. Introduction
  2. Training Materials (Luxembourg training 2017)
  3. MISP Virtual Machine
  4. MISP Community at CIRCL
  5. Updates

You can report incidents via our official contact including e-mail, phone or use the Anonymous reporting form.


CIRCL is accredited TI CIRCL is a FIRST member CIRCL is an OASIS member


In 2016 and 2017, CIRCL gave multiple practical trainings of MISP(Malware Information Sharing Platform & Threat Sharing). The purpose was to reach out the security analysts using MISP as a threatintel plaform along with the users using it as an information sharing platform.

This page includes all the materials used during the training including slides and a virtual machine preconfigured with the latest version of MISP.

  • Next MISP training in Luxembourg will be the 20th March 2017. Registration
  • Next MISP training in Nantes (France) will be the 5th April 2017. Registration

Training Materials (Luxembourg training 2017)

MISP Virtual Machine

  • (most recent) Virtual image with MISP 2.4.69 SHA512 sum: 07da3b4cab3f465ddb8bc158f057ec3e205563cc7390eb4e6f5282fefa51134757a8b72f3efaee7f6a323013b40f572c0c581b21854e83b7cad54c24259c7ff0

Login and passwords for the VirtualBox MISP image are the following:

Web interface (default network settings):
MISP admin:  admin@misp.training/Password1234
MISP user:  user@misp.training/Password1234
Shell/SSH: misp/Password1234
MySQL:  root/Password1234 - misp/Password1234

If you want to convert the image from VirtualBox to Parallels:

  • Get ovftools from VMware: https://www.vmware.com/support/developer/ovf/
  • Convert image: /Applications/VMware\ OVF\ Tool/ovftool –lax misp-training.ova misp-training.vmx
  • Open misp-training.vmx in Parallels
  • It converts and starts the image and it is ready to be used on a DHCP’ed IP address

MISP Community at CIRCL

If you want to connect to the CIRCL MISP community, feel free to contact us.


  • 3rd May 2016 - Virtual box image updated with MISP version 2.4.41
  • 29th July 2016 - Virtual box image updated MISP version 2.4.49
  • 4th September 2016 - Virtual box image 2.4.51 added (Brussels Training)
  • 18th November 2016 - Virtual box image with updated Ubuntu and MISP 2.4.54 added
  • 21st November 2016 - Broken link to ‘ovftools’ fixed, added clarification for web interface
  • 30th November 2016 - Virtual box image 2.4.55.ova added
  • 23th December 2016 - Virtual box image with MISP 2.4.58 added
  • 9th January 2017 - Virtual box image MISP 2.4.59 added
  • 18th January 2017 - Virtual Machine (VM) for MISP 2.4.60 added
  • 25th January 2017 - Virtual Machine updated to MISP 2.4.61
  • 13th March 2017 - Virtual Machine updated to version 2.4.69