MISP - Malware Information Sharing Platform & Threat Sharing - Training Materials

MISP - Malware Information Sharing Platform & Threat Sharing - Training Materials

Back to Services

  1. Introduction
  2. Training Materials (Luxembourg training 2017)
  3. MISP Virtual Machine
  4. MISP Community at CIRCL
  5. Updates

You can report incidents via our official contact including e-mail, phone or use the Anonymous reporting form.


CIRCL is accredited TI CIRCL is a FIRST member CIRCL is an OASIS member


In a continuous effort since 2016, CIRCL frequently gives practical training sessions about MISP(Malware Information Sharing Platform & Threat Sharing). The purpose is to reach out to security analysts using MISP as a threatintel platform along with users using it as an information sharing platform.

This page includes all the materials used during the training, including slides and a virtual machine, preconfigured with the latest version of MISP.

  • Next MISP training in Luxembourg is on 21st November 2017. Registration open
  • Next MISP Developer Meet-up and Hackathon is on 22nd November 2017. Registration

Training Materials (Luxembourg training 2017)

In complement to the above materials, the overall MISP documentation is available in misp-book. HTML format - PDF format - EPUB format - MOBI/Kindle format

MISP Virtual Machine

  • (most recent) Virtual image with MISP 2.4.77 SHA512 sum: fe01348369b4f2586d08fee0416908a17d2aa75cf00814804bd5da3b9121c5f9a2a1fa6753a2e977513fa93996db77d443fcbe31921bca4d6c4e80481845f299 SHA1 sum: 4f6596d43d0f689b89e9d28cb81c39dfa7b8a096

Login and passwords for the VirtualBox MISP image are the following:

Web interface (default network settings):
MISP admin:  admin@misp.training/Password1234
MISP user:  user@misp.training/Password1234
Shell/SSH: misp/Password1234
MySQL:  root/Password1234 - misp/Password1234

If you want to convert the image from VirtualBox to Parallels:

  • Get ovftools from VMware: https://www.vmware.com/support/developer/ovf/
  • Convert image: /Applications/VMware\ OVF\ Tool/ovftool –lax -st=OVA misp-training.ova misp-training.vmx
  • Open misp-training.vmx in Parallels
  • It converts and starts the image and it is ready to be used on a DHCP’ed IP address

MISP Community at CIRCL

If you want to connect to the CIRCL MISP community, feel free to contact us.


  • 3rd May 2016 - Virtual box image updated with MISP version 2.4.41
  • 29th July 2016 - Virtual box image updated MISP version 2.4.49
  • 4th September 2016 - Virtual box image 2.4.51 added (Brussels Training)
  • 18th November 2016 - Virtual box image with updated Ubuntu and MISP 2.4.54 added
  • 21st November 2016 - Broken link to ‘ovftools’ fixed, added clarification for web interface
  • 30th November 2016 - Virtual box image 2.4.55.ova added
  • 23th December 2016 - Virtual box image with MISP 2.4.58 added
  • 9th January 2017 - Virtual box image MISP 2.4.59 added
  • 18th January 2017 - Virtual Machine (VM) for MISP 2.4.60 added
  • 25th January 2017 - Virtual Machine updated to MISP 2.4.61
  • 13th March 2017 - Virtual Machine updated to version 2.4.69
  • 31th March 2017 - Virtual Machine updated to version 2.4.70
  • 12th April 2017 - 2.4.71 updated + new MISP training in Luxembourg
  • 28th April 2017 - MISP 2.4.72 VM updated
  • 26th June 2017 - MISP 2.4.76 VM updated
  • 13th July 2017 - MISP 2.4.77 VM updated