diff --git a/INSTALL/screenshots/sh-misp-attack.png b/INSTALL/screenshots/sh-misp-attack.png
new file mode 100644
index 000000000..f08e984c8
Binary files /dev/null and b/INSTALL/screenshots/sh-misp-attack.png differ
diff --git a/INSTALL/screenshots/sh-misp-decaying-of-indicators.png b/INSTALL/screenshots/sh-misp-decaying-of-indicators.png
new file mode 100644
index 000000000..a5abefd17
Binary files /dev/null and b/INSTALL/screenshots/sh-misp-decaying-of-indicators.png differ
diff --git a/INSTALL/screenshots/sh-misp-eventgraph.png b/INSTALL/screenshots/sh-misp-eventgraph.png
new file mode 100644
index 000000000..8970f58ea
Binary files /dev/null and b/INSTALL/screenshots/sh-misp-eventgraph.png differ
diff --git a/INSTALL/screenshots/sh-misp-threat-actor-attack.png b/INSTALL/screenshots/sh-misp-threat-actor-attack.png
new file mode 100644
index 000000000..13bf5e914
Binary files /dev/null and b/INSTALL/screenshots/sh-misp-threat-actor-attack.png differ