Download and Install MISP
MISP source code is available on GitHub including documentation and scripts for installation.
ChangeLog contains a detailed list of updates for each software release in the core of the MISP software.
MISP Install guides (stock install instructions for getting a base MISP system running) are available at https://misp.github.io/MISP/.
Requirements
MISP can be easily installed on any standard GNU/Linux distribution.
For MISP 2.5, we highly recommend the use of Ubuntu 24.04, using the provided installer, for other distributions and versions some manual tinkering may be required.
For MISP 2.4, Installation guides for various distributions are included in the INSTALL directory. If you did a git clone of MISP for the installation, an UPDATE procedure is available to keep your MISP up-to-date. We advise against installing new instances of 2.4 at this point though, unless you are absolutely bound by the distribution requirements of 2.5.
If you have a MISP 2.4 installation on Ubuntu 24.04 or an older Ubuntu installation, please upgrade your distribution to 24.04 and use the provided upgrade script.
Recommended distribution
We recommend to use a recent and stable Ubuntu distribution (such as 24.04) for deploying MISP.
Virtual images for testing
If you would like to test MISP and don’t want to do an installation, CIRCL generates automatically VMware images and VirtualBox at each MISP core commit. Available at https://vm.misp-project.org/. The image is to be used for testing purposes only, production-use is considered to be dangerous as is, it contains much more than MISP alone but also misp-dashboard and viper which requires additional security review before being in production.
The default credentials for the automatically generated virtual machines are the following:
For the MISP web interface -> admin@admin.test:admin
For the system -> misp:Password1234
VirtualBox
Please add the following forwards on your VM Host:
VBoxManage controlvm MISP_VM_NAME natpf1 www,tcp,,8080,,80
VBoxManage controlvm MISP_VM_NAME natpf1 ssh,tcp,,2222,,22
VBoxManage controlvm MISP_VM_NAME natpf1 dashboard,tcp,,8001,,8001
VMware Users
Log in on the VM using the console, and change the baseurl to the IP address of your VM.
sudo -u www-data /var/www/MISP/app/Console/cake Baseurl https://a.b.c.d
sudo systemctl restart apache2
Vagrant
misp-vagrant deploys MISP project software with Vagrant.
Docker containers
- Production ready docker images for MISP and MISP-modules are maintained by Stefano Ortolani from VMware. Images are regularly pushed to MISP GitHub Package registry and a blog post with step by step instruction is available here.
- Docker image focused on high performance and security based on CentOS Stream 8 is maintained by National Cyber and Information Security Agency of the Czech Republic.
We invite you to read the GitHub README page of each version to understand what better fits your needs.
Puppet
- puppet-misp This module installs and configures MISP (Malware Information Sharing Platform) on CentOS 7.
Ansible
- MISP ansible An ansible role to setup a MISP instance.
misp-cloud - Cloud-ready images of MISP
- misp-cloud - The objective of this project is to deliver cloud-ready images of MISP for testing purposes. AWS is currently supported.
RPM
- MISP-RPM - RPM Packages for MISP.
License
The MISP software is an open source and free software released under the AGPL (Affero General Public License). We are committed to ensure that MISP will remain a free and open source project on the long-run.
The MISP taxonomies and galaxy are licensed under CC0 1.0 Universal (CC0 1.0) - Public Domain Dedication or 2-clause BSD open source license. This allows interoperability with any product. (open source or proprietary)