Skip to main content

Bit9 API for their Cyber Forensics Service

Project description

https://raw.githubusercontent.com/blacktop/bit9-api/master/doc/logo.png

bit9-api

https://travis-ci.org/blacktop/bit9-api.svg?branch=master https://badge.fury.io/py/bit9-api.png https://pypip.in/d/bit9-api/badge.png http://img.shields.io/gittip/blacktop.svg

Bit9 API for their Cyber Forensics Service

https://www.bit9.com/solutions/cloud-services/cyber-forensics

Installation

$ pip install bit9-api

Usage

import json
from bit9_api import Bit9Api

USER = 'user'
PASSWORD = 'password'

bit9 = Bit9Api(USER, PASSWORD)

# Win 7 SP1 - calc.exe
calc_exe_md5 = '60B7C0FEAD45F2066E5B805A91F4F0FC'

response =  bit9.lookup_hashinfo(calc_exe_md5)
print json.dumps(response, sort_keys=False, indent=4)

Output:

{
    "hashinfo": {
        "peheadermetadata": {
            "fileversion": "6.1.7601.17514 (win7sp1_rtm.101119-1850)",
            "language": "English (United States)",
            "companyname": "Microsoft Corporation",
            "codepage": "Unicode",
            "productname": "Microsoft\u00ae Windows\u00ae Operating System",
            "version": "6.1.7601.17514",
            "productversion": "6.1.7601.17514",
            "originalname": "CALC.EXE",
            "description": "Windows Calculator"
        },
        "fileinfo": {
            "firstseendateutc": "2011-02-10T20:24:00Z",
            "ispeformat": true,
            "iscontainer": true,
            "firstseenname": "calc.exe",
            "sha256": "80c10ee5f21f92f89cbc293a59d2fd4c01c7958aacad15642558db700943fa22",
            "sha1": "9018a7d6cdbe859a430e8794e73381f77c840be0",
            "crc32": "-1919983730",
            "ssdeep": "6144:Jv7Wc4dyC7dXNBzn68YoC+6VoQSkgrpZHqk61peBN1L+I8pfezYeWHMzyy14pL1k:JvSbJxPRC+XQSxb6Dc7RwIWHeGL7GOK                                     ",
            "filesizebytes": "776192",
            "isexecutable": true,
            "md5": "60b7c0fead45f2066e5b805a91f4f0fc"
        },
        "trust": "10",
        "threat": "0",
        "certificate": {
            "commonname": "Microsoft Windows                                                                                                               "
        }
    },
    "request": "/1/hashinfo/lookup.json?md5=60b7c0fead45f2066e5b805a91f4f0fc&flags=15&tool=pythonapi&data="
}

Testing

To run the tests:

$ ./tests

Documentation

Documentation is comming soon.

Contributing

  1. Fork it.

  2. Create a branch (git checkout -b my_bit9_api)

  3. Commit your changes (git commit -am “Added Something Cool”)

  4. Push to the branch (git push origin my_bit9_api)

  5. Open a [Pull Request](https://github.com/blacktop/bit9-api/pulls)

  6. Wait for me to figure out what the heck a pull request is…

Release History

1.0.8 (2014-05-18)

Bugfixes

  • Fixing README.rst for better PYPI presentation.

1.0.2 (2014-05-18)

API Changes

  • Changing folder structure so when people import it it is not dumb :(

1.0.1 (2014-04-14)

Bugfixes

  • Trying to fix setup.py for deploying to PYPI.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

bit9-api-1.0.8.tar.gz (20.8 kB view details)

Uploaded Source

File details

Details for the file bit9-api-1.0.8.tar.gz.

File metadata

  • Download URL: bit9-api-1.0.8.tar.gz
  • Upload date:
  • Size: 20.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No

File hashes

Hashes for bit9-api-1.0.8.tar.gz
Algorithm Hash digest
SHA256 e7b4757f50fd19872e67b02b8df512fd22b1834113384acd5de27ce2e262774d
MD5 b56a0a90cbfe8db9f72fc30a69e8bba0
BLAKE2b-256 42580be633f543e659167fa484c365fe0db37859fbb0359215eabc09809a2413

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page