Skip to content

tracking info in tool for parser #90

Open

Description

@vineetabajaj

I am trying to track how a tool run, and maintain its log and giving output in xml.
where i can find these parser without using cuckoo, please help me in tracking info so that i can make use of parser for different tool.

Activity

  1. ikiril01 commented on Mar 27, 2017

    @ikiril01
    Member

    Hi @vineetabajaj - can you please provide some clarification about what you're trying to do? Is your goal to output MAEC from other tools (not just Cuckoo), or something else?

  2. vineetabajaj commented on Mar 28, 2017

    @vineetabajaj
    Author
  3. vineetabajaj commented on Apr 10, 2017

    @vineetabajaj
    Author

    yes i want to know how a tool store its output and maintain its log and gives output in xml(maec).

  4. vineetabajaj commented on Apr 10, 2017

    @vineetabajaj
    Author

    yes i want to know how a tool used by cuckoo store its output and maintain its log and gives output in xml(maec).

  5. ikiril01 commented on Apr 10, 2017

    @ikiril01
    Member

    The Cuckoo Sandbox MAEC module [1] parses the Cuckoo results and then uses the python-maec library [2] to generate its output.

    [1] https://github.com/cuckoosandbox/cuckoo/blob/5231ff3a455e9c1c36239a025a1f6840029a9ed8/modules/reporting/maec40.py
    [2] https://github.com/MAECProject/python-maec

    Hope this helps, at least as a starting point - if you have any specific questions about either feel free to ask :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions