From ab2efef9b8b11c0ee2b8aed01251547b754ee20b Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Fri, 5 Jun 2020 17:13:04 +0200 Subject: [PATCH] What are the required steps after a MISP installation to have a properly running instance? --- faq/README.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/faq/README.md b/faq/README.md index a02acfe..6daa5fe 100644 --- a/faq/README.md +++ b/faq/README.md @@ -1003,6 +1003,20 @@ sudo sudo systemctl restart apache2 3. Scroll down to the **PHP Settings** section and verify +### What are the required steps after a MISP installation to have a properly running instance? + +- First login with the installation credentials and change the password immediatly (especially if your instance is publicly accessible) +- Set the base_url to the hostname of your machine (apache virtualhost name) +- Create a new organisation which will be the host organisation running the MISP instance +- Set the new organisation in `MISP.host_org_id` to replace the default one +- Set messages like `MISP.footermidleft` and alike to a proper message to help your users +- Create a new user as `admin` role with the new organisation +- Log with the new user, if successful, remove the default user used during the installation such as `admin@admin.test` +- Select and enable required taxonomies for your sharing community +- Select and enable the external feeds (as caching only if you don't want full events but you can get the full feeds too) +- Select and enable the warning-list (if you don't know what to enable, select all) +- Add the remote MISP instances where you have access to (either caching only or full pull if you want the complete events) +