valitydev/Cortex-Analyzers
14
0
Fork 0
mirror of https://github.com/valitydev/Cortex-Analyzers.git synced 2024-11-07 17:38:53 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

template for CuckooSandbox analyzer

Browse Source
This commit is contained in:
garanews 2017-05-19 17:10:30 +02:00 committed by GitHub
parent 7301f7f430
commit 053d1a3345
1 changed files with 148 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

148
thehive-templates/CuckooSandbox_File_Analysis_Inet_1_0/long.html Normal file
View File

@ -0,0 +1,148 @@
<div class="report-CuckooSandbox" ng-if="success">
<style>
.report-CuckooSandbox dl {
margin-bottom: 2px;
}
</style>
<div class="panel panel-info">
<div class="panel-heading">
<strong>General Information</strong>
</div>
<div class="panel-body">
<h4>File information</h4>
<br>
<dl class="dl-horizontal">
<dt>FileType</dt>
<dd>{{content.file_type}}</dd>
</dl>
<dl class="dl-horizontal">
<dt>Malfamily</dt>
<dd>{{content.malfamily}}</dd>
</dl>
<dl class="dl-horizontal">
<dt>Malscore</dt>
<dd>
<span ng-class="{'label-info': content.malscore<=2, 'label-warning': content.malscore>2 && content.malscore<=6.5, 'label-danger': content.malscore >6.5}">
{{content.malscore}}
</span>
</dd>
</dl>
</div>
</div>
<div class="panel panel-info">
<div class="panel-heading">
<strong>Analysis</strong>
</div>
<div class="panel-body">
<div ng-if="content.signatures">
<h4>Signatures</h4>
<br>
<dl class="dl-horizontal" ng-repeat="signature in content.signatures track by $index">
<dd>{{ signature }}<dd>
</dl>
</div>
<div ng-if="!content.signatures">
No suspicious signature reported
</div>
</div>
</div>
<div class="panel panel-info">
<div class="panel-heading">
<strong>Analysis</strong>
</div>
<div class="panel-body">
<div ng-if="content.hosts">
<h4>Remote connections</h4>
<br>
<div>
<table class="table table-hover">
<tr>
<th>Domain</th>
<th>IP</th>
<th>Location</th>
</tr>
<tr ng-repeat="host in content.hosts track by $index">
<td>{{host[1]}}</td>
<td>{{host[0]}}</td>
<td>{{host[2]}}</td>
</tr>
</table>
</div>
</div>
<br/>
<hr>
<br/>
<div ng-if="content.uri">
<h4>URI</h4>
<br>
<dl class="dl-horizontal" ng-repeat="uri in content.uri track by $index">
<dd>{{ uri }}<dd>
</dl>
</div>
<div ng-if="!content.uri">
No suspicious uri reported
</div>
</div>
</div>
<div class="panel panel-info">
<div class="panel-heading">
<strong>Yara</strong>
</div>
<div class="panel-body">
<div ng-if="content.yara">
<h4>Yara</h4>
<br>
<dl class="dl-horizontal" ng-repeat="yara in content.yara track by $index">
<dd>{{ yara }}<dd>
</dl>
</div>
<div ng-if="!content.yara">
No suspicious activity reported
</div>
</div>
</div>
<div class="panel panel-info">
<div class="panel-heading">
<strong>Suricata</strong>
</div>
<div class="panel-body">
<div ng-if="content.suricata_alerts">
<h4>Suricata Alerts</h4>
<br>
<dl class="dl-horizontal" ng-repeat="suri in content.suri track by $index">
<dd>{{ suri }}<dd>
</dl>
</div>
<div ng-if="!content.suri">
No suspicious suricata alerts reported
</div>
</div>
</div>
</div>
<!-- General error -->
<div class="panel panel-danger" ng-if="!success">
<div class="panel-heading">
<strong>{{(artifact.data || artifact.attachment.name) | fang}}</strong>
</div>
<div class="panel-body">
{{content.errorMessage}}
</div>
</div>