Using MISP VM ova file, import it on VirtualBox and respond to the questions below.
NOTE: Internal interface and assign an IP address (edit the file /etc/network/interfaces), so that
you can connect to the WebApp from a browser.
1. When clicking on Home, why there are no events?
2. List Feeds to check the list of default feeds. Go to Sync Actions.
3. Check how it looks like by Loading all default feed metadata.
4. Explain step by step. In Home there is still no events. What do you have to do to see, for
instance, IPs blocked by Snort?
5. These events are available in Home. Prove it?
6. What kind of information is shown in the list at the bottom? What does this information
represent? Click on the ID to populate information about this event.
7. Using ipgeolocation.io, locate one of the entries in the list. Choose it randomly.
8. Go back to the list of feeds and add all related to malware (use the search engine). If it takes a
while, check in Administration Jobs the background tasks. Once done, prove again you got
events from all of them.
9. URLhaus Show the details?
10. Show the information regarding malware stealer. In the Galaxies menu, you can search for
topics.
11. For phishing URLs? What feed would you use
12. And for spam?.
ENGLISH5 QUARTER4 MODULE1 WEEK1-3 How Visual and Multimedia Elements.pptx
Using MISP VM ova file, import it on VirtualBox and respond to the q.pdf
1. Using MISP VM ova file, import it on VirtualBox and respond to the questions below.
NOTE: Internal interface and assign an IP address (edit the file /etc/network/interfaces), so that
you can connect to the WebApp from a browser.
1. When clicking on Home, why there are no events?
2. List Feeds to check the list of default feeds. Go to Sync Actions.
3. Check how it looks like by Loading all default feed metadata.
4. Explain step by step. In Home there is still no events. What do you have to do to see, for
instance, IPs blocked by Snort?
5. These events are available in Home. Prove it?
6. What kind of information is shown in the list at the bottom? What does this information
represent? Click on the ID to populate information about this event.
7. Using ipgeolocation.io, locate one of the entries in the list. Choose it randomly.
8. Go back to the list of feeds and add all related to malware (use the search engine). If it takes a
while, check in Administration Jobs the background tasks. Once done, prove again you got
events from all of them.
9. URLhaus Show the details?
10. Show the information regarding malware stealer. In the Galaxies menu, you can search for
topics.
11. For phishing URLs? What feed would you use
12. And for spam?
