Application-of-Sequential-Analysis-on-Runtime-Behavior-for-Ransomware-Classification

This is a python program that extract and create the feature based on the ransomware's activities in the promon log file. The command : python readfile.py --dir (input directory) --output (ouput csv file) --header (true or false) --dir is the input directory where you store your promon log file. --output is the csv file for storing the dataset --header. Header is true means the output file is newly created and there is no record. Header will be added to the file. Header is false means the output is an existing file and there is record in the file. No header is necessary.