Installing MISP Dashboard

Installing MISP Dashboard

Install MISP Dashboard

We will cover 2 different scenarios:

A) MISP v2.4 installed without the Dashboard. Installed with the script without parameter -D or without being installed because of the changes on versiones 2.4.122 & 2.4.123 related to changes in MaxMind.

B) MISP 2.4 installed with a version older than MISP 2.4.121 and using the script with -D parameter.

Verification os scenarios A) or B):

if you have a /var/www/misp-dashboard &  /etc/apache2/sites-available/misp-dashboard.conf then you are in B) else you are in case A)

Step by Step Guide

1. Create free account in MaxMind for the product geolite2 

https://www.maxmind.com/en/geolite2/signup

2. Log in: https://www.maxmind.com/en/account/login

Go to My License Key:

3. Generate a new key

4. Add description (1), configure it for GeoIP Update (2) and versions older than 3.1.1 (3). Confirm. 

5. Note the User ID (1) ad created License Key (2). Download the configuration.

6. Wait for 5 min for the key confirmation and receive a confirmation email.
7. Access your MISP server through SSH
8. Download the scripts in $HOME

DOWNLOAD THE SCRIPTS FROM HERE (Google Drive Shared Folder) https://drive.google.com/drive/folders/1q6dclzFvEFIIFd-atGx5npRCN8pDJoxY?usp=sharing

For Scenario A

INSTALL_MISP_DASHBOARD.sh

INSTALL_DEPENDENCIES_MOD.sh

For Scenario B

MODIFY_MISP_DASHBOARD.sh

9. Execute:

For Scenario A

$ bash INSTALL_MISP_DASHBOARD.sh

For Scenario B

$ bash MODIFY_MISP_DASHBOARD.sh

10. Your MaxMind user and password will be required
11. Edit /var/www/misp-dashboard/config/config.cfg and change the host IP from 0.0.0.0 to your MISP server IP

12. Restart network interface

$ sudo netplan apply

13. Access your new dashboard on the port 8001 over https (https://MISP-IP:8001)

Created by Enrique Rossel – KMHCORP – 13/3/2020.