Client library for Intezer cloud service
Project description
intezer-analyze
A cross-platform CLI tool which enables analyzing files with Intezer Analyze.
Prerequisites
Python 3.6 and above
Python and pip should be available in your path
Installation
pip install intezer-analyze-cli
Usage
Proxies
The CLI supports proxies. To use a proxy, set the environment variable HTTP_PROXY
or HTTPS_PROXY
to the proxy address.
Login
To begin using the cli, first you should login with your API key:
intezer-analyze login <api_key>
If you are running the CLI against an on premise deployment, enter the url:
intezer-analyze login <api_key> http://<address>/api
Analyze
Send a file or a directory for analysis in Intezer Analyze.
Usage
intezer-analyze analyze PATH
Parameters
PATH: Path to file or directory to send the files inside for analysis.
Examples:
Send a single file for analysis:
$ intezer-analyze analyze C:\threat.exe
Send all files in directory for analysis:
$ intezer-analyze analyze C:\files-to-analyze
For complete documentation please run intezer-analyze analyze --help
Analyze hashes file
Send a text file with list of hashes
Usage
intezer-analyze analyze_by_list PATH
Parameters
PATH: Path to txt file.
Example
Send txt file with hashes for analysis:
$ intezer-analyze analyze_by_list ~/files/hashes.txt
For complete documentation please run intezer-analyze analyze_by_list --help
Index
Send a file or a directory for indexing
Usage
intezer-analyze index PATH INDEX_AS [FAMILY_NAME]
Parameters
PATH: Path to file or directory to index
INDEX_AS: malicious
or trusted
FAMILY_NAME: The family name (optional)
Example
index a single file:
$ intezer-analyze index ~/files/threat.exe.sample malicious family_name
index all files in directory:
$ intezer-analyze index ~/files/files-to-index trusted
For complete documentation please run intezer-analyze index --help
Index hashes file
Send a text file with list of hashes to index
Usage
intezer-analyze index_by_list PATH --index-as=INDEX [FAMILY_NAME]
Parameters
PATH: Path to txt file
--index-as: malicious
or trusted
FAMILY_NAME: The family name (optional)
Example
Send a file with hashes and verdict for indexing:
$ intezer-analyze index_by_list ~/files/hashes.txt --index-as=malicious family_name
For complete documentation please run intezer-analyze index --help
Upload offline endpoint scan
Upload an offline scan created by running the Intezer Endpoint Scanner with '-o' flag
Usage
intezer-analyze upload_endpoint_scan OFFLINE_SCAN_DIRECTORY
Parameters
OFFLINE_SCAN_DIRECTORY: Path to directory with offline endpoint scan results
Examples:
Upload a directory with offline endpoint scan results:
$ intezer-analyze upload_endpoint_scan /home/user/offline_scans/scan_MYPC_2019-01-01_00-00-00
For complete documentation plrase run intezer-analyze upload_endpoint_scan --help
Upload multiple offline endpoint scans
Upload multiple offline scans created by running the Intezer Endpoint Scanner with '-o' flag
Usage
intezer-analyze upload_endpoint_scans_in_directory OFFLINE_SCANS_ROOT_DIRECTORY
Parameters
OFFLINE_SCANS_ROOT_DIRECTORY: Path to root directory containing offline endpoint scan results
Examples:
Upload a directory with offline endpoint scan results:
$ intezer-analyze upload_endpoint_scans /home/user/offline_scans
For complete documentation please run intezer-analyze upload_endpoint_scans_in_directory --help
Upload all subdirectories with .eml files to analyze
Upload a directory with .eml files
Parameter
UPLOAD_EMAILS_IN_DIRECTORY: Path to root directory containing the .eml fiels
Examples:
$ intezer-analyze upload_emails_in_directory /path/to/emails_root_directory
Troubleshooting
The cli produce a log file named intezer-analyze-cli.log
in the current working directory.
To enable console output, set the environment variable INTEZER_DEBUG=1
.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for intezer-analyze-cli-1.10.1.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | c34165790d28bd03cf71ab4187fabfe67388b8157160aa7fa68da461e1c1068f |
|
MD5 | df63a984a0d3cb19ce3adb589703e0f4 |
|
BLAKE2b-256 | 83d45a9cd88551580d95ad925d29c19c5fef634b67ea334e0cd42e9ca288a0fd |
Hashes for intezer_analyze_cli-1.10.1-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 6764e675b08d338e754db955cc0b63c171bb8b0325beb7549583508222b3c4de |
|
MD5 | 9b6b75ff7e6fa19523bde5da972b39db |
|
BLAKE2b-256 | 4e163b3a1db2c50eb0a4b8427200b2c7e47c0f8a7b7700ce619ff574507b2f25 |