Bit9 API for their Cyber Forensics Service
Project description
bit9-api
Bit9 API for their Cyber Forensics Service
https://www.bit9.com/solutions/cloud-services/cyber-forensics
Installation
$ pip install bit9-api
Usage
import json
from bit9_api import Bit9Api
USER = 'user'
PASSWORD = 'password'
bit9 = Bit9Api(USER, PASSWORD)
# Win 7 SP1 - calc.exe
calc_exe_md5 = '60B7C0FEAD45F2066E5B805A91F4F0FC'
response = bit9.lookup_hashinfo(calc_exe_md5)
print json.dumps(response, sort_keys=False, indent=4)
Output:
{
"hashinfo": {
"peheadermetadata": {
"fileversion": "6.1.7601.17514 (win7sp1_rtm.101119-1850)",
"language": "English (United States)",
"companyname": "Microsoft Corporation",
"codepage": "Unicode",
"productname": "Microsoft\u00ae Windows\u00ae Operating System",
"version": "6.1.7601.17514",
"productversion": "6.1.7601.17514",
"originalname": "CALC.EXE",
"description": "Windows Calculator"
},
"fileinfo": {
"firstseendateutc": "2011-02-10T20:24:00Z",
"ispeformat": true,
"iscontainer": true,
"firstseenname": "calc.exe",
"sha256": "80c10ee5f21f92f89cbc293a59d2fd4c01c7958aacad15642558db700943fa22",
"sha1": "9018a7d6cdbe859a430e8794e73381f77c840be0",
"crc32": "-1919983730",
"ssdeep": "6144:Jv7Wc4dyC7dXNBzn68YoC+6VoQSkgrpZHqk61peBN1L+I8pfezYeWHMzyy14pL1k:JvSbJxPRC+XQSxb6Dc7RwIWHeGL7GOK ",
"filesizebytes": "776192",
"isexecutable": true,
"md5": "60b7c0fead45f2066e5b805a91f4f0fc"
},
"trust": "10",
"threat": "0",
"certificate": {
"commonname": "Microsoft Windows "
}
},
"request": "/1/hashinfo/lookup.json?md5=60b7c0fead45f2066e5b805a91f4f0fc&flags=15&tool=pythonapi&data="
}
Testing
To run the tests:
$ ./tests
Documentation
Documentation is comming soon.
Contributing
Fork it.
Create a branch (git checkout -b my_bit9_api)
Commit your changes (git commit -am “Added Something Cool”)
Push to the branch (git push origin my_bit9_api)
Open a [Pull Request](https://github.com/blacktop/bit9-api/pulls)
Wait for me to figure out what the heck a pull request is…
Release History
1.0.8 (2014-05-18)
Bugfixes
Fixing README.rst for better PYPI presentation.
1.0.2 (2014-05-18)
API Changes
Changing folder structure so when people import it it is not dumb :(
1.0.1 (2014-04-14)
Bugfixes
Trying to fix setup.py for deploying to PYPI.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
File details
Details for the file bit9-api-1.0.8.tar.gz
.
File metadata
- Download URL: bit9-api-1.0.8.tar.gz
- Upload date:
- Size: 20.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | e7b4757f50fd19872e67b02b8df512fd22b1834113384acd5de27ce2e262774d |
|
MD5 | b56a0a90cbfe8db9f72fc30a69e8bba0 |
|
BLAKE2b-256 | 42580be633f543e659167fa484c365fe0db37859fbb0359215eabc09809a2413 |