In this guide, we walk through the complete process of setting up a MISP server using a Docker container. From the initial deployment to performing the first login and verifying access to the web interface, you will learn how to efficiently get your MISP instance up and running.

• Ubuntu 24
• Ubuntu 26

Equipment list

Here you can find the list of equipment used to create this tutorial.

This link will also show the software list used to create this tutorial.

Tutorial Docker - Install MISP using Containers

Install the required packages.

Copy to Clipboard

Install Docker and Docker Compose.

Copy to Clipboard

Start the Docker service.

Copy to Clipboard

Enable the Docker service to start automatically.

Copy to Clipboard

Clone the MISP repositoy.

Copy to Clipboard

Copy the template and configure the environment file.

Copy to Clipboard

Change the following items from the configuration file:

Copy to Clipboard

Change the admin account, password, and IP address to match your environment.

Create the MISP container using Docker Compose.

Copy to Clipboard

Here is the command output.

Copy to Clipboard

Open your browser and access the web interface on port 80.

Copy to Clipboard

Replace the IP address with the address of the computer running the container.

Log in to the MISP web interface using the username and password configured.

MISP - Login

After a successful login, you will be redirected to the MISP dashboard.

MISP - Dashboard

Congratulations! You have successfully installed MISP in a Docker container.

Tutorial MISP - Configuring MISP IOC Feeds

Access the following menu.

Copy to Clipboard

Click on the button to load the default feeds.

Copy to Clipboard

Enable the desired list of IOC Feeds.

MISP - Enable feeds

Click on the button to download the selected feeds.

MISP - fetch feeds

Downloading the feeds can take a significant amount of time.

To search for an IOC, navigate to the following menu.

Copy to Clipboard

Enter an attribute and select the filter options.

MISP - Search IOC

The search results will display events containing this IOC.

MISP - Search Results IOC

You can even download the command to deny or block access to this specific IOC directly from MISP.

MISP - IOC Netfilter

Congratulations! You are now able to search for IOCs in your MISP installation.