You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mokaddem 13d981756d chg: [decaying-light] Updated slides to fit the current state 3 years ago
0-misp-introduction-to-information-sharing chg: [0] misp-ux survey slide 4 years ago
1-misp-usage Dutch translation of 1-MISP User Training - General usage of MISP 4 years ago
1.1-misp-viper-integration add: [1.2.1] mail2misp slides added 4 years ago
1.2-misp-integration chg: [integration] missing logo fixed 4 years ago
1.2.1-misp-integration-mail2misp add: [1.2.1] mail2misp slides added 4 years ago
2-misp-administration new: [2] MISP administration overview added 4 years ago
3-misp-taxonomy-tagging Update content.tex 4 years ago
3.1-misp-modules chg: Updated MISP modules slides 3 years ago
3.2-misp-galaxy chg: [galaxy] Added more info for galaxy-matrix creation 4 years ago
3.3-misp-object-template fix: Typo in a title 4 years ago
6.0-misp-dashboard chg: [misp-dashboard] recent changes in the misp-dashboard added 4 years ago
a.0-contributing chg: [contributing] fixing title page 4 years ago
a.1-devintro new: [6.0/a] added 4 years ago
a.2-pymisp new: [a.2] pymisp slides added 4 years ago
a.3-misp-feed new: [a.3] added 4 years ago
a.4-best-practices chg: [a.4] references added 4 years ago
a.5-bis-decaying-indicators-light-version chg: [decaying-light] Updated slides to fit the current state 3 years ago
a.5-decaying-indicators chg: [misp-training] algorithm typo fixed 4 years ago
a.6-forensic chg: [forensic] mention the famous zoidberg branch 4 years ago
a.7-rest-API Merge branch 'master' of into restAPI_notebook 4 years ago
a.8-dev-hands-on small changes 4 years ago
a.9-restsearch-dev highlighting done 4 years ago
a.a-widget-dev front page fixed 3 years ago
attack chg: [attack] slides added 4 years ago
b.1-best-practices-in-threat-intelligence chg: [b.1] typos fixed 4 years ago
b.2-turning-data-into-actionable-intelligence chg: [b.2] Added some bolds 4 years ago
b.4-turning-data-into-actionable-intelligence-short added pdf 3 years ago
complementary/ack chg: [contributors] add @rommelfs as contributor (mail2misp part) 4 years ago
includes new: added gsma training slides 3 years ago
misp-summit/2019 Merge branch 'master' of 4 years ago
misp-summit-2019 added misp summit dir 4 years ago
themes chg: [themes] title size fixed 4 years ago
training-support new: [agenda] default generic 3 years ago
x.1-belgomisp fix: added reports 4 years ago
x.2-melicertes added new decks 3 years ago
x.3-into-short added new decks 3 years ago
x.4-cansecwest final 3 years ago
x.5-covid chg: [covid] typo fixed 3 years ago
x.6-how-information-sharing-is-saving-us new: [slides] x.6-how-information-sharing-is-saving-us 3 years ago
x.6-isac-intro added isac intro 3 years ago
x.8-first-cti-virtual small changes 3 years ago
x.9-eu-attack-community chg: [slides] EU attack community 3 years ago new: [] skeleton added 3 years ago
x.11-gsma chg: [gsma] Formating 3 years ago chg: [video] covid-19 video added 3 years ago chg: [build] a.a slide added 3 years ago

MISP Training Materials

This repository includes all the training materials in use such as

  • Core MISP (software and standard) trainings
  • Threat intelligence and OSINT training
  • Building information sharing communities workshop

All the materials are available with the complete LaTeX source code meant to assist in contributing or extending the training materials. A special attention is given to the open source licensing given to the materials. We welcome contributions in order to improve the training set for threat intelligence, intelligence gathering and analysis along with specific aspects of information sharing/exchange in information and national security.


Slides (PDF) Source Code
0-misp-introduction-to-information-sharing source
1-misp-usage source
1.2-misp-integration source
1.1-misp-viper-integration source
1.2.1-misp-integration-mail2misp source
2-misp-administration source
3-misp-taxonomy-tagging source
3.1-misp-modules source
3.2-misp-galaxy source
3.3-misp-object-template source
6.0-misp-dashboard source
a.0-contributing source
a.1-devintro source
a.2-pymisp source
a.3-misp-feed source
a.4-best-practices source
a.5-decaying-indicators source
a.6-forensic source
a.7-rest-API source
a.8-dev-hands-on.pdf source
a.9-restsearch-dev.pdf source
b.1-best-practices-in-threat-intelligence source
b.2-turning-data-into-actionable-intelligence source

Complementary materials

Slides (PDF) Source Code
complete slide desk in one PDF source
MISP training cheat-sheet source
MISP feature list (for the trainers) source

Additional documentation

MISP Training videos

Sample videos which can be used to understand how the training materials are used in companion with a live MISP demo instance.

MISP Training support videos

Those are videos to support MISP trainings or demonstrations at large:

MISP Training VMs

Pre-built MISP training VMs are available at

Source Code

The full source code of the training slide decks are available. You'll need to have an operating system with a recent installation of LaTeX including latex-beamer to work with them.

To build the complete set of training materials:


The output directory will contain all the generated PDF files and the PDF file called misp-training.pdf which is the complete handout of all the slides.

Note: In case the rendering is somewhat broken, it might be related to latex using the styles installed systemwide in /usr/share/texlive/texmf-dist/tex/latex/beamertheme-focus. Removing this directory will solve the problem.

License, Attribution and Funding

All the materials are dual-licensed under GNU Affero General Public License version 3 or later and the Creative Commons Attribution-ShareAlike 4.0 International. You can use either one of the licenses depending of your use case of the training materials.

The MISP project training materials are co-financed and supported by CIRCL Computer Incident Response Center Luxembourg and co-financed by a CEF (Connecting Europe Facility) funding under CEF-TC-2016-3 - Cyber Security as Improving MISP as building blocks for next-generation information sharing.

All the source code is available at

If you reuse the training materials, don't forget to include the above for attribution.

Contributors in alphabetical order

  • Steve Clement 🏠
  • Alexandre Dulaunoy 🏠
  • Andras Iklody 🏠
  • Sami Mokaddem 🏠
  • Sascha Rommelfangen 🏠
  • Christian Studer 🏠
  • Raphaël Vinot 🏠
  • Gerard Wagener 🏠