Cyber Security: MISP Install - Revision history

Unknown user at 03:22, 13 July 2023

2023-07-13T03:22:15Z

← Older revision		Revision as of 03:22, 13 July 2023
Line 49:		Line 49:
	php-gnupg php-intl php-bcmath php-gd php-curl		php-gnupg php-intl php-bcmath php-gd php-curl

	Selanjutnya, update PHP configuration ~~options~~,		Selanjutnya, update PHP configuration option,

	vim /etc/php/7.4/apache2/php.ini		vim /etc/php/7.4/apache2/php.ini
Line 58:		Line 58:
	memory_limit="2048M"		memory_limit="2048M"

	Similarly, update PHP session ID length ~~and~~ set strict session ID mode;		Similarly, update PHP session ID length dan set strict session ID mode;

	echo -e 'session0sid_length="32"\nsession0use_strict_mode="1"' \| sudo tee -a /etc/php/7.4/apache2/php.ini		echo -e 'session0sid_length="32"\nsession0use_strict_mode="1"' \| sudo tee -a /etc/php/7.4/apache2/php.ini

	==Create MISP Database ~~and~~ Database User==		==Create MISP Database dan Database User==

	Login to MySQL ~~and~~ create MISP database ~~and~~ database user		Login ke MySQL dan create MISP database dan database user

	~~First of all~~, run MySQL initial secure script;		Pertama-tama, run MySQL initial secure script;

	sudo systemctl start mariadb		sudo systemctl start mariadb
	sudo mysql_secure_installation		sudo mysql_secure_installation

	~~Once you have ran the~~ script, ~~proceed to~~ create MISP database ~~and~~ database user;		Setelah kita menjalankan script, lanjut ke create MISP database dan database user;

	sudo mysql -u root -p -e "create database misp;"		sudo mysql -u root -p -e "create database misp;"
Line 77:		Line 77:
	sudo mysql -u root -p -e "flush privileges;"		sudo mysql -u root -p -e "flush privileges;"

	Import MISP database ~~into~~ database ~~created above~~;		Import MISP database ke database yang dibuat di atas;

	sudo -Hu www-data cat /var/www/MISP/INSTALL/MYSQL.sql \| mysql -u mispadmin -p misp		sudo -Hu www-data cat /var/www/MISP/INSTALL/MYSQL.sql \| mysql -u mispadmin -p misp

	==Install MISP on Ubuntu 22.04/Ubuntu 20.04==		==Install MISP di Ubuntu 22.04/Ubuntu 20.04==

	Create MISP directory ~~under~~ /var/www;		Create MISP directory dibawah /var/www;

	sudo mkdir /var/www/MISP		sudo mkdir /var/www/MISP

	Clone the MISP Core Github repository ~~into the~~ directory ~~above~~;		Clone the MISP Core Github repository ke directory di atas;

	sudo git clone https://github.com/MISP/MISP.git /var/www/MISP/		sudo git clone https://github.com/MISP/MISP.git /var/www/MISP/
Line 95:		Line 95:
	sudo -u www-data git -C /var/www/MISP config core.filemode false		sudo -u www-data git -C /var/www/MISP config core.filemode false

	Create a python3 virtualenv		Create python3 virtualenv

	sudo -u www-data virtualenv -p python3 /var/www/MISP/venv		sudo -u www-data virtualenv -p python3 /var/www/MISP/venv
Line 128:		Line 128:
	sudo ldconfig		sudo ldconfig

	Install PyDeep;		Install PyDeep,
	sudo -u www-data /var/www/MISP/venv/bin/pip install git+https://github.com/kbandla/pydeep.git		sudo -u www-data /var/www/MISP/venv/bin/pip install git+https://github.com/kbandla/pydeep.git

	Install lief		Install lief,
	sudo -u www-data /var/www/MISP/venv/bin/pip install lief		sudo -u www-data /var/www/MISP/venv/bin/pip install lief

	Install zmq		Install zmq,
	sudo -u www-data /var/www/MISP/venv/bin/pip install zmq redis		sudo -u www-data /var/www/MISP/venv/bin/pip install zmq redis

	Install python-magic		Install python-magic,
	sudo -u www-data /var/www/MISP/venv/bin/pip install python-magic		sudo -u www-data /var/www/MISP/venv/bin/pip install python-magic

	Install plyara;		Install plyara,
	sudo -u www-data /var/www/MISP/venv/bin/pip install plyara		sudo -u www-data /var/www/MISP/venv/bin/pip install plyara

	Install CakePHP		==Install CakePHP==

	Create PHP composer directory;		Create PHP composer directory;
Line 163:		Line 163:
	/var/www/MISP/app/Plugin/CakeResque/Config/config.php		/var/www/MISP/app/Plugin/CakeResque/Config/config.php

	Set Proper Permissions and Ownership of MISP directories		==Set Proper Permissions and Ownership of MISP directories==

	Once the installation of MISP is done, update the ownership and permissions of the directories;		Once the installation of MISP is done, update the ownership and permissions of the directories;

Unknown user at 01:34, 13 July 2023

2023-07-13T01:34:26Z

← Older revision		Revision as of 01:34, 13 July 2023
Line 1:		Line 1:
	~~In this~~ tutorial, ~~you will learn how to install~~ MISP on Ubuntu 22.04/Ubuntu 20.04. MISP, ~~an acronym for~~ Malware Information Sharing Platform, ~~is an~~ open source threat intelligence platform ~~for sharing~~, ~~storing and correlating Indicators of Compromise of targeted attacks~~, ~~threat intelligence~~, financial fraud ~~information~~, ~~vulnerability information or even counter~~-~~terrorism information~~.		Dalam tutorial ini, Anda akan belajar cara menginstal MISP di Ubuntu 22.04/Ubuntu 20.04. MISP, akronim untuk Malware Information Sharing Platform, adalah open source threat intelligence platform untuk berbagi, menyimpan, dan menghubungkan Indikator Kompromi dari serangan yang ditargetkan, intelijen ancaman, informasi financial fraud, informasi kerentanan, atau bahkan informasi kontra-terorisme.

			==Install MISP di Ubuntu 22.04/Ubuntu 20.04==

	~~Install~~ MISP ~~on Ubuntu 22.04/Ubuntu 20.04~~		Untuk menginstal MISP di Ubuntu 22.04/Ubuntu 20.04, Anda dapat menggunakan skrip instalasi atau cukup melakukan instalasi manual sehingga Anda mengetahui apa yang sedang terjadi. Disini, kita akan menggunakan cara manual.
	~~To install MISP on~~ Ubuntu 22.04/Ubuntu 20.04, ~~you can use an install script or simply do the~~ manual ~~installation so you have an idea of what is going on~~. ~~We will go the~~ manual ~~way in this guide~~.

			Untuk memulainya, pastikan cache paket sistem Anda updated.

			sudo apt update

	~~Fullscreen~~		==Install Postfix and paket pendukung==
	~~How to Update or~~ Install ~~Windows 11 22H2 on Unsupported PCs?~~
	~~To begin with, ensure your system package cache is up-to-date.~~

	~~sudo apt update~~		Jika Anda ingin mengonfigurasi MISP untuk mengirimkan notifikasi email, Anda menginstal Postfix untuk digunakan dengan relai email pilihan Anda.

	~~Install Postfix anf Other Required Packages~~		sudo apt install postfix mailutils curl gcc git gpg-agent make \
	~~If you want to configure MISP to sent out email notifications, you install Postfix to use with your preferred mail relays.~~		libcaca-dev liblua5.3-dev \
			python python3 openssl redis-server vim zip unzip \
	sudo apt install postfix mailutils curl gcc git gpg-agent make libcaca-dev liblua5.3-dev \		virtualenv libfuzzy-dev sqlite3 \
	python python3 openssl redis-server vim zip unzip virtualenv libfuzzy-dev sqlite3 \		moreutils python3-dev python3-pip libxml2-dev \
	moreutils python3-dev python3-pip libxml2-dev libxslt1-dev zlib1g-dev \		libxslt1-dev zlib1g-dev \
	python-setuptools openssl cmake		python-setuptools openssl cmake

	~~When prompted to choose the~~ Postfix general type of mail configuration, ~~select~~ Internet Site		Saat diminta untuk memilih Postfix general type of mail configuration, pilih Internet Site

	~~For the~~ domain ~~part~~, ~~select your~~ domain ~~part~~ (~~not~~ FQDN). ~~E.g if your hostname is~~ misp.kifarunix-demo.com, ~~use~~ kifarunix-demo.com.		Untuk bagian domain, pilih bagian domain Anda (bukan FQDN). Misalnya jika nama host Anda adalah misp.kifarunix-demo.com, gunakan kifarunix-demo.com.

			==Create MISP User Account==

	~~Create~~ MISP ~~User Account~~		Jalankan perintah di bawah ini untuk membuat akun pengguna MISP dan menambahkannya ke grup sistem lainnya.
	~~Run the command below to create MISP user account and add it to other system groups~~.

	sudo useradd -s /bin/bash -m -G adm,cdrom,sudo,dip,plugdev,www-data,staff misp		sudo useradd -s /bin/bash -m -G adm,cdrom,sudo,dip,plugdev,www-data,staff misp

	~~Set the~~ password ~~for the user account~~.		Tetapkan password untuk akun pengguna.

	sudo passwd misp		sudo passwd misp

	Install LAMP Stack ~~and Required Dependencies~~		==Install LAMP Stack==
	~~Run the command below to install LAMP stack and other required packages.~~

	Install MariaDB ~~10.9~~, ~~current stable release version as of this writing.~~		Install MariaDB versi terakhir,

	curl -LsS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup \| sudo bash -s -- --mariadb-server-version=10.9		curl -LsS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup \| sudo bash -s -- --mariadb-server-version=10.9
	sudo apt install mariadb-client mariadb-server -y		sudo apt install mariadb-client mariadb-server -y

	Install PHP 7.4 ~~and required PHP modules;~~		Install PHP 7.4 dan modul pendukungnya,

	apt install libapache2-mod-php php php-cli php-dev php-json php-xml php-mysql php-opcache \		apt install libapache2-mod-php php php-cli php-dev \
	php-readline php-mbstring php-zip php-redis php-gnupg php-intl php-bcmath php-gd php-curl		php-json php-xml php-mysql php-opcache \
	~~On Ubuntu 22.04, check this guide on how to install PHP 7.4 on Ubuntu 22.04.~~		php-readline php-mbstring php-zip php-redis \
			php-gnupg php-intl php-bcmath php-gd php-curl

			Selanjutnya, update PHP configuration options,

	~~Next, update the following PHP configuration options;~~		vim /etc/php/7.4/apache2/php.ini

	~~vim /etc/php/7.4/apache2/php.ini~~
	upload_max_filesize="50M"		upload_max_filesize="50M"
	post_max_size="50M"		post_max_size="50M"
Line 62:		Line 62:
	echo -e 'session0sid_length="32"\nsession0use_strict_mode="1"' \| sudo tee -a /etc/php/7.4/apache2/php.ini		echo -e 'session0sid_length="32"\nsession0use_strict_mode="1"' \| sudo tee -a /etc/php/7.4/apache2/php.ini

	Create MISP Database and Database User		==Create MISP Database and Database User==

	Login to MySQL and create MISP database and database user		Login to MySQL and create MISP database and database user

Line 80:		Line 81:
	sudo -Hu www-data cat /var/www/MISP/INSTALL/MYSQL.sql \| mysql -u mispadmin -p misp		sudo -Hu www-data cat /var/www/MISP/INSTALL/MYSQL.sql \| mysql -u mispadmin -p misp

	Install MISP on Ubuntu 22.04/Ubuntu 20.04		==Install MISP on Ubuntu 22.04/Ubuntu 20.04==

	Create MISP directory under /var/www;		Create MISP directory under /var/www;

Line 186:		Line 188:
	}		}

	Configure MISP		==Configure MISP==

	Rename the default configurations as follows;		Rename the default configurations as follows;
Line 215:		Line 217:
	Save and exit the file;		Save and exit the file;

	Generate MISP GnuPG key;		==Generate MISP GnuPG key==

	Create a batch file to define variable required for non-interactive GPG keys generation.		Create a batch file to define variable required for non-interactive GPG keys generation.

Line 242:		Line 245:
	\| sudo -u www-data tee /var/www/MISP/app/webroot/gpg.asc		\| sudo -u www-data tee /var/www/MISP/app/webroot/gpg.asc

	Setup MISP Background Workers		==Setup MISP Background Workers==

	Create a systemd service for MISP background workers;		Create a systemd service for MISP background workers;

Line 331:		Line 335:
	EOL		EOL

	Initialize MISP Configuration		==Initialize MISP Configuration==

	Initialize the user and fetch authentication key;		Initialize the user and fetch authentication key;
	sudo -Hu www-data /var/www/MISP/app/Console/cake userInit -q		sudo -Hu www-data /var/www/MISP/app/Console/cake userInit -q

Unknown user at 00:21, 11 July 2023

2023-07-11T00:21:20Z

← Older revision		Revision as of 00:21, 11 July 2023
Line 5:		Line 5:
	To install MISP on Ubuntu 22.04/Ubuntu 20.04, you can use an install script or simply do the manual installation so you have an idea of what is going on. We will go the manual way in this guide.		To install MISP on Ubuntu 22.04/Ubuntu 20.04, you can use an install script or simply do the manual installation so you have an idea of what is going on. We will go the manual way in this guide.

	~~Run system Update~~
	~~How to Update or Install Windows 11...~~

	~~Pause~~

	~~Unmute~~
	~~Remaining Time -2:25~~

Unknown user at 00:20, 11 July 2023

2023-07-11T00:20:53Z

Show changes

Unknown user: Created page with " Install MISP on Ubuntu 22.04/Ubuntu 20.04 gen_too|Last Updated: November 8, 2022|Security, HowTos, Monitoring|Leave a Comment In this tutorial, you will learn how to install..."

2023-07-11T00:08:25Z

Created page with " Install MISP on Ubuntu 22.04/Ubuntu 20.04 gen_too|Last Updated: November 8, 2022|Security, HowTos, Monitoring|Leave a Comment In this tutorial, you will learn how to install..."

Show changes