Capsule8 api-python

This repo is as a wrapper repo around the Capsule8 sensor api.

Install with pip

pip install capsule8

Install with virtualenv

virtualenv test_capsule8
cd test_capsule8
source bin/activate
pip install capsule8

Examples

In order to run the examples you need to have a running capsule8 sensor on your machine. Once you have a running sensor you can run the examples. Be sure that the capsule8 sensor socket chowned by the current user.

sudo chown $USER /var/run/capsule8/sensor.sock

Then you can run the SensorClient and start streaming capsule8 sensor telemetry. In this example, every process events pid will be printed to stdout

from capsule8.sensor import SensorClient
from itertools import islice

s = SensorClient()


s.subscribe({"event_filter": {
    "process_events": [
        {"type": "PROCESS_EVENT_TYPE_FORK"},
        {"type": "PROCESS_EVENT_TYPE_EXEC"},
        {"type": "PROCESS_EVENT_TYPE_EXIT"}
    ]
}})

max_events = 5
for event in islice(s.telemetry(), max_events):
    print(event.events[0].event.process_pid)

Metadata

Release files for capsule8 1.12

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for capsule8 1.12
File	Size	Uploaded
capsule8-1.12.tar.gz	21.0 kB	Jul 13, 2018	Details

Release files / capsule8-1.12.tar.gz

Download URL	capsule8-1.12.tar.gz
Size	21.0 kB
Tags	Source
SHA-256 checksum How to use checksums	`8af7f1feb8a0a6d0c45f4dbd8df839242ea2e4de05e8b8b0e2dbc244610ab1ef`
BLAKE2b-256 checksum How to use checksums	`56168f23c40c37aa9f4ea3ed9f865de949b58c01b212ec63ec5c5ee0b1afa78e`
Upload date	Jul 13, 2018
Uploaded using Trusted Publishing? What is trusted publishing?	No