Functions — github.com/archcloudlabs/HackSpaceCon_Malware_Analysis_Course

CodeHub MCPcopy Create free account

hub / github.com/archcloudlabs/HackSpaceCon_Malware_Analysis_Course / functions

Functions8 in github.com/archcloudlabs/HackSpaceCon_Malware_Analysis_Course

⨍ Functions 8 ◇ Types & classes 1

↓ 1 callersFunction__create_path__

(path="./malware")

01_Automating_Collection/malshare_download.py:38

↓ 1 callersFunction__printer_helper__

Helper function to print dataclass

03_Public_Feeds/ha-parse.py:72

↓ 1 callersFunctiondownload_sample

Download a sample from malshare based on hash return: byte array to write to file

01_Automating_Collection/malshare_download.py:81

↓ 1 callersFunctionget_latest_hashes

Grab the latest hashes (md5/sha1/sha256) from the Malshare API. hashAlgo: string value to indiciate the hash algorithm to use. return: L

01_Automating_Collection/malshare_download.py:63

↓ 1 callersFunctiongreynoise

query an IP address against GreyNoise's API returns JSON string

03_Public_Feeds/ha-parse.py:36

↓ 1 callersFunctionprocess_data

get data from hybrid-analysis public feed and then enrich/parse it. data: JSON blob of data from hybrid-analysis return: None

03_Public_Feeds/ha-parse.py:47

Function__inline_patch__

Patch the binary object w/ machine id that does not exist to prevent execution. this is optional, but given to you as a choice! return b

01_Automating_Collection/malshare_download.py:44

Functionpulsedive

query an IP address against PulseDive's API returns JSON string

03_Public_Feeds/ha-parse.py:26