MISP - Malware Information Sharing Platform & Threat Sharing - Training Materials

MISP - Malware Information Sharing Platform & Threat Sharing - Training Materials

Back to Services

  1. Introduction
  2. Training Materials (Luxembourg training 2017)
  3. MISP Virtual Machine
  4. MISP Community at CIRCL
  5. Updates

You can report incidents via our official contact including e-mail, phone or use the Anonymous reporting form.


CIRCL is accredited TI CIRCL is a FIRST member CIRCL is an OASIS member


In a continuous effort since 2016, CIRCL frequently gives practical training sessions about MISP(Malware Information Sharing Platform & Threat Sharing). The purpose is to reach out to security analysts using MISP as a threatintel platform along with users using it as an information sharing platform.

This page includes all the materials used during the training, including slides and a virtual machine, preconfigured with the latest version of MISP.

  • Next MISP training in Luxembourg is on 21st November 2017. Registration open
  • Next MISP Developer Meet-up and Hackathon is on 22nd November 2017. Registration

Training Materials (Luxembourg training 2017)

In complement to the above materials, the overall MISP documentation is available in misp-book. HTML format - PDF format - EPUB format - MOBI/Kindle format

MISP Virtual Machine

  • (most recent) Virtual image with MISP 2.4.79 SHA512 sum: 01fdd378757b888ef344ce0b50567308a9a687680516c3a1688d5a7fc320e0e9ce8993881d7d1ac8cac35f9d6b7dce0389c88e6c278b443f31685c20901b2457 SHA1 sum: c5e00f4f7e8c8260f42ad13e2a398ed11e0be477

Login and passwords for the VirtualBox MISP image are the following:

Web interface (default network settings):
MISP admin:  admin@misp.training/Password1234
MISP user:  user@misp.training/Password1234
Shell/SSH: misp/Password1234
MySQL:  root/Password1234 - misp/Password1234

If you want to convert the image from VirtualBox to Parallels:

  • Get ovftools from VMware: https://www.vmware.com/support/developer/ovf/
  • Convert image: /Applications/VMware\ OVF\ Tool/ovftool –lax misp-training.ova misp-training.vmx
  • Open misp-training.vmx in Parallels
  • It converts and starts the image and it is ready to be used on a DHCP’ed IP address

MISP Community at CIRCL

If you want to connect to the CIRCL MISP community, feel free to contact us.


  • 3rd May 2016 - Virtual box image updated with MISP version 2.4.41
  • 29th July 2016 - Virtual box image updated MISP version 2.4.49
  • 4th September 2016 - Virtual box image 2.4.51 added (Brussels Training)
  • 18th November 2016 - Virtual box image with updated Ubuntu and MISP 2.4.54 added
  • 21st November 2016 - Broken link to ‘ovftools’ fixed, added clarification for web interface
  • 30th November 2016 - Virtual box image 2.4.55.ova added
  • 23th December 2016 - Virtual box image with MISP 2.4.58 added
  • 9th January 2017 - Virtual box image MISP 2.4.59 added
  • 18th January 2017 - Virtual Machine (VM) for MISP 2.4.60 added
  • 25th January 2017 - Virtual Machine updated to MISP 2.4.61
  • 13th March 2017 - Virtual Machine updated to version 2.4.69
  • 31th March 2017 - Virtual Machine updated to version 2.4.70
  • 12th April 2017 - 2.4.71 updated + new MISP training in Luxembourg
  • 28th April 2017 - MISP 2.4.72 VM updated
  • 26th June 2017 - MISP 2.4.76 VM updated
  • 13th July 2017 - MISP 2.4.77 VM updated
  • 28th August 2017 - MISP 2.4.79 VM updated