Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change Hash artifact to "File" artifact #18

Open
deadbits opened this issue Aug 19, 2018 · 1 comment
Open

Change Hash artifact to "File" artifact #18

deadbits opened this issue Aug 19, 2018 · 1 comment
Assignees
Labels
enhancement in-progess module New module or module enhancement testing Features being tested before deployment
Projects

Comments

@deadbits
Copy link
Contributor

  • File artifact will still be identified by its has but can then contain more additional data such as PE features automatically upon creation if file exists on disk
  • If file not on disk, user can download it from VT (or other sources I'm working on adding for scanning / downloading files and reports)
  • Users can run newly created YARA scan rule against file and store results
  • Users can scan files against external services like VT, Hybrid Analysis, Anlyz, etc.
    • Modules for these need to be created
@deadbits deadbits self-assigned this Aug 19, 2018
@deadbits deadbits added enhancement module New module or module enhancement labels Aug 19, 2018
@deadbits deadbits added this to To do in Version 1.0 via automation Aug 19, 2018
@deadbits deadbits added in-progess testing Features being tested before deployment labels Aug 28, 2018
@deadbits
Copy link
Contributor Author

In progress.. Artifacts are being re-worked so instead of one Artifact object each type will have it's own object with fields specific to it's type.

@deadbits deadbits moved this from To do to Needs review in Version 1.0 Aug 28, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement in-progess module New module or module enhancement testing Features being tested before deployment
Projects
Version 1.0
  
Testing
Development

No branches or pull requests

1 participant