Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Malpedia integration #10

Closed
mlodic opened this issue Feb 24, 2020 · 2 comments
Closed

Malpedia integration #10

mlodic opened this issue Feb 24, 2020 · 2 comments

Comments

@mlodic
Copy link
Member

mlodic commented Feb 24, 2020

We should add an analyzer to scan a given file against all the yara rules available in Malpedia.

https://malpedia.caad.fkie.fraunhofer.de/usage/api#apiscanbinary

@eshaan7
Copy link
Member

eshaan7 commented Mar 10, 2020

The POST /api/scan/binary endpoint you mentioned requires an API token(i.e. registered account ). However, on the Malpedia website it says "Please note that Malpedia does not feature open registration. It is operated as an invite-only trust group."

I want to work on this but I won't be able to w/o an API key. What do you suggest ?

@mlodic
Copy link
Member Author

mlodic commented Mar 10, 2020

You could ask for an invitation.

If you really are into giving something to the Threat Intelligence Community, you should try to join different groups or projects and bring your efforts where it is needed. Malpedia is one of the greatest sharing projects in this community.

If you do not manage to join the project, you can still contribute to Intel Owl with another analyzer. Check the issues or bring your own ideas! Everything is welcome!

@mlodic mlodic closed this as completed in 05b6374 May 24, 2021
mlodic pushed a commit that referenced this issue Jun 15, 2021
* [Fixes #10] - Add Malpedia Analyzer (#425)

* Add mimetypes and change soft time limit
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants