[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cuckoo
Subject:    [cuckoo] Post-analysis script
From:       alessandro () lonerunners ! net (Alessandro Tanasi)
Date:       2013-08-03 8:45:33
Message-ID: 22E73BB7-92E2-49CD-9BB6-A7E91FA7A534 () lonerunners ! net
[Download RAW message or body]

Hello,
you don't need to rename anything, and plugins are not executed in alphabetic order.

If you take a look to the definition of base class of the different modules \
(abstracts.py) you may spot e parameter "order". In the definition of run() in \
plugins.py, the plugins are ordered by "order" parameter before being executed.

So, we developed a way to force the execution order of modules: you have just to edit \
"order" value in the module.

Regards,
Alessandro `jekil` Tanasi
alessandro at tanasi.it

On Aug 2, 2013, at 9:53 PM, Michael Boman wrote:

> Perhaps scripts should be named with a numeric prefix, just like how start/stop \
> scripts are done on (older) Linux systems - including upstream modules? 
> Best regards,
> Michael Boman
> 
> 
> On Sat, Jul 20, 2013 at 12:53 AM, Robert Simmons <rsimmons0 at gmail.com> wrote:
> Correct me if I'm wrong but, at the moment, the modules are run in
> alpha-numeric order.  You should be able to prepend a z_ to the
> beginning of the file name to have it run last.
> 
> On Fri, Jul 19, 2013 at 11:18 AM, xavi galian <galirua at gmail.com> wrote:
> > Hi Andre,
> > 
> > Don't know in 0.7 dev but I needed the same thing,  and I wrote a new
> > reporting module in order to access both to the analysis path and to the
> > results fat-dict, and it works fine.
> > 
> > I was wondering If there was another way to do it without messing with the
> > core scripts, and the only way I found was this one.
> > 
> > Regards,
> > 
> > Xavi
> > 
> > 
> > On Fri, Jul 19, 2013 at 5:04 PM, Andre Correa <andre.correa at pobox.com>
> > wrote:
> > > 
> > > Hello,
> > > 
> > > I'm running Cuckoo 0.7-dev and need to execute a shell script right
> > > after each analysis/report is done. There are references to a
> > > post-analysis script only in documentations for older Cuckoo versions.
> > > 
> > > Is it possible to run a post-analysis script on 0.7-dev? If not, is
> > > writing a "reporting module" the best way to go?
> > > 
> > > Thank you,
> > > 
> > > Andre
> > > _______________________________________________
> > > cuckoo mailing list
> > > cuckoo at public.honeynet.org
> > > https://public.honeynet.org/mailman/listinfo/cuckoo
> > 
> > 
> > 
> > _______________________________________________
> > cuckoo mailing list
> > cuckoo at public.honeynet.org
> > https://public.honeynet.org/mailman/listinfo/cuckoo
> > 
> _______________________________________________
> cuckoo mailing list
> cuckoo at public.honeynet.org
> https://public.honeynet.org/mailman/listinfo/cuckoo
> 
> 
> 
> -- 
> Application Vulnerability and Malicious Code Hunter
> www.michaelboman.org | blog.michaelboman.org | about.me/michael.boman
> _______________________________________________
> cuckoo mailing list
> cuckoo at public.honeynet.org
> https://public.honeynet.org/mailman/listinfo/cuckoo

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://public.honeynet.org/pipermail/cuckoo/attachments/20130803/a4703d38/attachment.html \



[prev in list] [next in list] [prev in thread] [next in thread]