PyLOOBins
PyLOOBins is a Python SDK and command-line utility for programmatically interacting with LOOBins.
You can download PyLOOBins from PyPI by running the following command:
pip install pyloobins
PyLOOBins requires Python 3.8 or later.
Usage
Command-line
You can run pyloobins --help to see the available commands and options.
>>> pyloobins --help
Usage: pyloobins [OPTIONS] COMMAND [ARGS]...
Create, validate, and view LOOBin objects.
Options:
--help Show this message and exit.
Commands:
create Create a YAML template file for a new LOOBin.
get Get a LOOBin object.
validate Validate a LOOBin YAML file.
You can run pyloobins <command> --help to see the available options for a specific command.
>>> pyloobins validate --help
Usage: pyloobins validate [OPTIONS]
Validate a LOOBin YAML file.
Options:
--path TEXT The path of the LOOBin YAML file to validate. [required]
--help Show this message and exit.
SDK
You can use pyloobins as a Python SDK to programmatically interact with LOOBins.
pyloobins.util
The util module can be used to get LOOBin objects from the LOOBins API, validate LOOBin YAML files, and create LOOBin YAML templates.
Example: get all LOOBins and print a list of the use case code.
from pyloobins import util
loobins = util.get_loobins()
for loobin in loobins:
for uc in loobin.example_use_cases:
print(f"{loobin.name}: {uc.code}")
pyloobins.models
The models module contains the classes that represent a LOOBin and its various components.
Example: programmitcally create a LOOBin object.
from pyloobins.models import Detection, ExampleUseCase, LOOBin, Resource
l = LOOBin(
name="",
short_description="A short description of the binary goes here.",
full_description="A full length description of the binary goes here.",
author="Enter your name or alias here.",
created=date.today(),
example_use_cases=[
ExampleUseCase(
name="An Example Use Case",
description="A description of the use case goes here.",
code="A code snippet goes here.",
tactics=["Discovery"],
tags=["example_tag", "another_tag"],
)
],
paths=["/enter/binary/path/here"],
detections=[
Detection(
name="A detection source (e.g. Sigma)",
url="https://urltodetection.here",
)
],
resources=[
Resource(
name="Name of resources.",
url="https://urlofexternalreference.here",
)
],
acknowledgements=["Enter any acknowledgements here."],
)
with open ("loobin.yaml", "w") as f:
f.write(l.to_yaml())
1 maintainer
Metadata
1 maintainer
Release files for PyLOOBins 1.7.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| pyloobins-1.7.0.tar.gz | 41.2 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| pyloobins-1.7.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 102.4 kB
Release files / pyloobins-1.7.0.tar.gz
| Download URL | pyloobins-1.7.0.tar.gz |
|---|---|
| Size | 41.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
1231f1a11e6443b72c39cb9a2d695c62c5f2c82417f0056b7d44991b1249c409
|
|
BLAKE2b-256 checksum How to use checksums |
e353e9bb1795f6368ed67b9a3e1dcd3c06eb582919bce40c4943979658afa986
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
poetry/1.8.3 CPython/3.10.14 Linux/6.5.0-1021-azure
|
Release files / pyloobins-1.7.0-py3-none-any.whl
| Download URL | pyloobins-1.7.0-py3-none-any.whl |
|---|---|
| Size | 61.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
82dd59b5137e4325dd702c0c82ef3dfb62d03f8f50061d2b5c4fb711524f315d
|
|
BLAKE2b-256 checksum How to use checksums |
924a406d6a19993f3f7790b3b5617ed4d6a90f33448f70779452423b471165f5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
poetry/1.8.3 CPython/3.10.14 Linux/6.5.0-1021-azure
|
