MISP - Malware Information Sharing Platform & Threat Sharing - Training Materials

Introduction

On March 22nd and 23rd, 2016, CIRCL gave two practical trainings to MISP (Malware Information Sharing Platform & Threat Sharing).

This page includes all the materials used during the training including slides and a virtual machine preconfigured with MISP 2.4.28.

Support

FIRST 2016 - MISP Workshop

Brussels MISP Workshop 2016

SWITCH MISP Training 2016 (and BotConf workshop 2016)

MISP Virtual Machine

Login and passwords for the VirtualBox MISP image are the following:

Web interface (default network settings): http://192.168.56.50/
MISP admin:  admin@misp.training/Password1234
MISP user:  user@misp.training/Password1234
Shell/SSH: misp/Password1234
MySQL:  root/Password1234 - misp/Password1234

If you want to convert the image from VirtualBox to Parallels:

  • Get ovftools from VMware: https://www.vmware.com/support/developer/ovf/
  • Convert image: /Applications/VMware\ OVF\ Tool/ovftool –lax misp-training.ova misp-training.vmx
  • Open misp-training.vmx in Parallels
  • It converts and starts the image and it is ready to be used on a DHCP’ed IP address

MISP Community at CIRCL

If you want to connect to the CIRCL MISP community, feel free to contact us.

Updates

  • 3rd May 2016 - Virtual box image updated with MISP version 2.4.41
  • 29th July 2016 - Virtual box image updated MISP version 2.4.49
  • 4th September 2016 - Virtual box image 2.4.51 added (Brussels Training)
  • 18th November 2016 - Virtual box image with updated Ubuntu and MISP 2.4.54 added
  • 21st November 2016 - Broken link to ‘ovftools’ fixed, added clarification for web interface
  • 30th November 2016 - Virtual box image 2.4.55.ova added
  • 23th December 2016 - Virtual box image with MISP 2.4.58 added
  • 9th January 2017 - Virtual box image MISP 2.4.59 added
  • 18th January 2017 - Virtual Machine (VM) for MISP 2.4.60 added