Capsule8 api-python

This repo is as a wrapper repo around the Capsule8 sensor api.

Install with pip

pip install capsule8

Install with virtualenv

virtualenv test_capsule8
cd test_capsule8
source bin/activate
pip install capsule8

Examples

In order to run the examples you need to have a running capsule8 sensor on your machine. Once you have a running sensor you can run the examples. Be sure that the capsule8 sensor socket chowned by the current user.

sudo chown $USER /var/run/capsule8/sensor.sock

Then you can run the SensorClient and start streaming capsule8 sensor telemetry. In this example, every process events pid will be printed to stdout

from capsule8.sensor import SensorClient
from itertools import islice

s = SensorClient()


s.subscribe({"event_filter": {
    "process_events": [
        {"type": "PROCESS_EVENT_TYPE_FORK"},
        {"type": "PROCESS_EVENT_TYPE_EXEC"},
        {"type": "PROCESS_EVENT_TYPE_EXIT"}
    ]
}})

max_events = 5
for event in islice(s.telemetry(), max_events):
    print(event.events[0].event.process_pid)

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

capsule8-1.10.tar.gz (31.9 kB view details)

Uploaded Jun 22, 2018 Source

File details

Details for the file capsule8-1.10.tar.gz.

File metadata

Download URL: capsule8-1.10.tar.gz
Upload date: Jun 22, 2018
Size: 31.9 kB
Tags: Source
Uploaded using Trusted Publishing? No

File hashes

Hashes for capsule8-1.10.tar.gz
Algorithm	Hash digest
SHA256	`9ad438d57ccb3de087b38a03e2e9e61e30bcf34d50b9a90f20207c656a88d91c`
MD5	`9608bb8a3bb32160b0868f9fadadec71`
BLAKE2b-256	`1a00bc5fafbadcc3922952d987d38d6cd8ae1ed33d0c7565579e9ab2285f648b`