Install OpenCTI using Docker

Required:

• a running Docker host
• git client installed on your PC
• docker-compose (optional)

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats.

The structuration of the data is performed using a knowledge schema based on the STIX2 standards. It has been designed as a modern web application including a GraphQL API and an UX oriented frontend. Also, OpenCTI can be integrated with other tools and applications such as MISP, TheHive, MITRE ATT&CK, etc.

Before running installation step we will need to set some variables. Edit .env file according to your needs.

For recommended installation run:

# env $(cat .env | grep ^[A-Z] | xargs) docker stack deploy --compose-file docker-compose.yml opencti

If you like to use old-school installation method run command:

# docker-compose --compatibility up

Now go to http://localhost:8080 and log in with the credentials configured in your environment variables.