-
Notifications
You must be signed in to change notification settings - Fork 1
/
service_manifest.yml
53 lines (45 loc) · 1.18 KB
/
service_manifest.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
name: APIVector
version: $SERVICE_TAG
description: >-
This service extracts library imports from windows PE files or memory dump to generate api vector classification.
accepts: executable/windows
rejects: empty|metadata/.*
stage: CORE
category: Static Analysis
file_required: true
timeout: 60
disable_cache: false
enabled: true
is_external: false
licence_count: 0
privileged: true
config:
min_confidence: 50
min_jaccard_info: 40
min_jaccard_tag: 80
docker_config:
image: ${REGISTRY}cccs/assemblyline-service-apivector:$SERVICE_TAG
cpu_cores: 1
ram_mb: 512
dependencies:
updates:
container:
allow_internet_access: true
command: ["python", "-m", "api_vector.updater"]
image: ${REGISTRY}cccs/assemblyline-service-apivector:$SERVICE_TAG
ports: ["5003"]
environment:
- name: MAX_REQUESTS
value: 0
run_as_core: True
update_config:
generates_signatures: false
sources:
- name: malpedia
headers:
- name: Authorization
value: "apitoken <REPLACE_ME>"
uri: https://malpedia.caad.fkie.fraunhofer.de/api/list/apiscout/csv
pattern: .*csv
update_interval_seconds: 86400
wait_for_update: false