intezer-cli
A cross-platform CLI tool which enables analyzing files with Intezer AI-SOC Platform.
Prerequisites
Python 3.10 and above
Python and pip should be available in your path
Installation
pip install intezer-analyze-cli
Usage
Proxies
The CLI supports proxies. To use a proxy, set the environment variable HTTP_PROXY or HTTPS_PROXY to the proxy address.
Login
To begin using the cli, first you should login with your API key:
intezer-cli login <api_key>
If you are running the CLI against an on premise deployment, enter the url:
intezer-cli login <api_key> http://<address>/api
Analyze
Send a file or a directory for analysis in Intezer Platform.
Usage
intezer-cli analyze PATH
Parameters
PATH: Path to file or directory to send the files inside for analysis.
Examples:
Send a single file for analysis:
$ intezer-cli analyze C:\threat.exe
Send all files in directory for analysis:
$ intezer-cli analyze C:\files-to-analyze
For complete documentation please run intezer-cli analyze --help
Analyze hashes file
Send a text file with list of hashes
Usage
intezer-cli analyze-by-list PATH
Parameters
PATH: Path to txt file.
Example
Send txt file with hashes for analysis:
$ intezer-cli analyze-by-list ~/files/hashes.txt
For complete documentation please run intezer-cli analyze-by-list --help
Index
Send a file or a directory for indexing
Usage
intezer-cli index PATH INDEX_AS [FAMILY_NAME]
Parameters
PATH: Path to file or directory to index
INDEX_AS: malicious or trusted
FAMILY_NAME: The family name (optional)
Example
index a single file:
$ intezer-cli index ~/files/threat.exe.sample malicious family_name
index all files in directory:
$ intezer-cli index ~/files/files-to-index trusted
For complete documentation please run intezer-cli index --help
Index hashes file
Send a text file with list of hashes to index
Usage
intezer-cli index-by-list PATH --index-as=INDEX [FAMILY_NAME]
Parameters
PATH: Path to txt file
--index-as: malicious or trusted
FAMILY_NAME: The family name (optional)
Example
Send a file with hashes and verdict for indexing:
$ intezer-cli index-by-list ~/files/hashes.txt --index-as=malicious family_name
For complete documentation please run intezer-cli index-by-list --help
Upload offline endpoint scan
Upload an offline scan created by running the Intezer Endpoint Scanner with '-o' flag
Usage
intezer-cli upload-endpoint-scan OFFLINE_SCAN_DIRECTORY
Parameters
OFFLINE_SCAN_DIRECTORY: Path to directory with offline endpoint scan results
Examples:
Upload a directory with offline endpoint scan results:
$ intezer-cli upload-endpoint-scan /home/user/offline_scans/scan_MYPC_2019-01-01_00-00-00
For complete documentation please run intezer-cli upload-endpoint-scan --help
Upload multiple offline endpoint scans
Upload multiple offline scans created by running the Intezer Endpoint Scanner with '-o' flag
Usage
intezer-cli upload-endpoint-scans-in-directory OFFLINE_SCANS_ROOT_DIRECTORY
Parameters
OFFLINE_SCANS_ROOT_DIRECTORY: Path to root directory containing offline endpoint scan results
Examples:
Upload a directory with offline endpoint scan results:
$ intezer-cli upload-endpoint-scans-in-directory /home/user/offline_scans
For complete documentation please run intezer-cli upload-endpoint-scans-in-directory --help
Upload all subdirectories with .eml files to analyze
Upload a directory with .eml files
Parameter
UPLOAD_EMAILS_IN_DIRECTORY: Path to root directory containing the .eml files
Examples:
$ intezer-cli upload-emails-in-directory /path/to/emails_root_directory
Troubleshooting
The cli produce a log file named intezer-cli-cli.log in the current working directory.
To enable console output, set the environment variable INTEZER_DEBUG=1.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file intezer_analyze_cli-1.16.1.tar.gz.
File metadata
- Download URL: intezer_analyze_cli-1.16.1.tar.gz
- Upload date:
- Size: 24.2 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.2.0 CPython/3.9.25
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
498ca4ccad5f6bb07aecc1c29057ec9b6b5da0af9cf63d3aa7335880d5fff56a
|
|
| MD5 |
a07523c15b00ba153cbf67521fd7da48
|
|
| BLAKE2b-256 |
be032fe070e4332ee44bdbdcf956af037953344a8a3d1878fa6b48a9b89d76a5
|
File details
Details for the file intezer_analyze_cli-1.16.1-py3-none-any.whl.
File metadata
- Download URL: intezer_analyze_cli-1.16.1-py3-none-any.whl
- Upload date:
- Size: 26.4 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.2.0 CPython/3.9.25
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
a7e9dc11f1d5e3dd3b752f6f8c6f860a3855749b3eea9a43db96b8c4339abdc4
|
|
| MD5 |
4093b05f5baa64c7656fbe32c378ff5e
|
|
| BLAKE2b-256 |
33a064bb705eb7e0a1d9d419e948c2cd445c0365f699f9c51d44ce2326f78b5e
|
