misp-cloud - Cloud-ready images of MISP

The objective of this project is to deliver cloud-ready images of MISP for testing purposes.

Currently the following providers are supported:

• [x] Amazon Web Services (AWS)
• [ ] Microsoft Azure
• [ ] DigitalOcean

Production usage

The image creation process takes into account security updates of the underlaying Operating System as well of MISP itself, which allows you to use the image in production. That being said, it's highly recommended that you change the credentials associated with MISP, DB and salt that is pre-configured with the images.

We recommend users to read MISP and Cloud Security for details and best pratices for usage of the platform in cloud environments.

Updates

The images are in sync with the development that happens with the project. We do not maintain old versions of the images in any of the providers, so it's safe to consider that each provider has an image with the latest version of MISP, and no other, older, version.

Deploying the images

Please select a provider for the instructions on how to deploy:

• AWS Instructions - Demo Video

Credentials & Access

The following are the credentials that you need to know:

• MISP Login: admin@admin.test
• MISP Pass: admin

If you do want to access the DB, both the user that runs the MISP DB as well as root, use the following:

• zgPKzFasIUj1LLGfzfhDVxRLOObzJLer

The images are built from Ubuntu AMI's, therefor the default username to SSH into the instance is ubuntu.

Optional Features

The following are enabled/installed in the image:

• ZeroMQ
• MISP modules
  • MISP galaxy
  • MISP modules
  • MISP taxonomies

ToDo

• [ ] Pipeline integration with main repository
• [ ] Add MISP-Dashboard