Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added VxStream Sandbox (Hybrid Analysis) Analyzer #73

Conversation

yugoslavskiy
Copy link
Contributor

According to data from official site [1], VxStream Sandbox Public API
allows you to analyze:

  • hash (OK, it works)
  • filename (OK, it works)
  • host / ip (some problems on API side for now)
  • domain / fqdn (some problems on API side for now)

[1] https://www.hybrid-analysis.com/apikeys/info

According to data from official site [1], VxStream Sandbox Public API
allows you to analyze:

- hash (OK, it works)
- filename (OK, it works)
- host / ip (some problems on API side for now)
- domain / fqdn (some problems on API side for now)

[1] https://www.hybrid-analysis.com/apikeys/info
@yugoslavskiy yugoslavskiy changed the title https://github.com/CERT-BDF/Cortex-Analyzers/issues/26 added VxStream Sandbox (Hybrid Analysis) Analyzer [#26](https://github.com/CERT-BDF/Cortex-Analyzers/issues/26) added VxStream Sandbox (Hybrid Analysis) Analyzer Jul 11, 2017
@yugoslavskiy yugoslavskiy changed the title [#26](https://github.com/CERT-BDF/Cortex-Analyzers/issues/26) added VxStream Sandbox (Hybrid Analysis) Analyzer Added VxStream Sandbox (Hybrid Analysis) Analyzer Jul 11, 2017
@jeromeleonard jeromeleonard self-requested a review July 12, 2017 11:00
@jeromeleonard jeromeleonard added this to the 1.6.0 milestone Jul 12, 2017
@jeromeleonard jeromeleonard removed this from the 1.6.0 milestone Jul 28, 2017
@jeromeleonard jeromeleonard added this to the 1.7.0 milestone Sep 4, 2017
@jeromeleonard jeromeleonard self-assigned this Sep 4, 2017
@jeromeleonard jeromeleonard added the scope:analyzer Issue is analyzer related label Sep 4, 2017
@jeromeleonard jeromeleonard changed the base branch from master to feature/vxstream October 2, 2017 14:36
@jeromeleonard jeromeleonard changed the base branch from feature/vxstream to develop October 2, 2017 14:39
@jeromeleonard jeromeleonard reopened this Oct 2, 2017
@jeromeleonard jeromeleonard merged commit 91b1377 into TheHive-Project:develop Oct 26, 2017
@saadkadhi
Copy link
Contributor

@yugoslavskiy We'll rename the analyzer to HybridAnalysis instead of VxStreamSandbox to align with the fact that it indeed interact with the public service and that is called Hybrid-Analysis_GetReport in the service interaction file (.json).

@yugoslavskiy
Copy link
Contributor Author

@saadkadhi np.
Also you probably will be interested in their own cortex analyzer (released 8 days ago)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
scope:analyzer Issue is analyzer related
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants