|Build Status| |Coverage Status| |License| |Fury| |PyPI|

|Code Health| |Project Ready| |Project InProgress| |Gitter chat|

Workbench

A scalable python framework for security research and development teams.

Workbench focuses on simplicity, transparency, and easy on-site customization. As an open source python project it provides light-weight task management, execution and pipelining for a loosely-coupled set of python classes.

Workbench Videos

-  `Getting Started with Workbench <http://youtu.be/v4zXhZINdDQ>`_
-  `Workbench Command Interface <http://youtu.be/MvSa7aklWTI>`_
-  `Workbench Command Interface 2 <http://youtu.be/VlxP7OdKQAI>`_
-  `Workbench Robust Client/Server <http://youtu.be/RxSaJuC6t1k>`_
-  `Dive into PCAPs with Workbench <http://youtu.be/ywasp2AEWO8>`_
-  `Correlating Yara Sigs with Workbench <http://youtu.be/7VAI20FrgOc>`_

Workbench Examples

• PCAP to Graph <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/PCAP_to_Graph.ipynb/>_ (A short teaser)
• Workbench Demo <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/Workbench_Demo.ipynb/>_
• Adding a new Worker <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/Adding_Worker.ipynb/>_ (super hawt)
• PCAP to Dataframe <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/PCAP_to_Dataframe.ipynb/>_
• PCAP DriveBy Analysis <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/PCAP_DriveBy.ipynb>_
• Using Neo4j for PE File Sim Graph <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/PE_SimGraph.ipynb>_
• Generator Pipelines Notebook <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/Generator_Pipelines.ipynb>_
• Network Stream Analysis Notebook <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/Network_Stream.ipynb>_
• PE File Static Analysis Notebook <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/PE_Static_Analysis.ipynb>_
• Memory Analysis Notebook <http://nbviewer.ipython.org/url/raw.github.com/SuperCowPowers/workbench/master/workbench/notebooks/Rekall_to_Dataframe.ipynb>_

Big Thanks

- Yara Sigs: AlienVault, Crowdstrike, Mandiant, Viper, KevTheHermit

Pull the repository

Warning!: The repository contains malcious data samples, be careful, exclude the workbench directory from AV, etc...

::

git clone https://github.com/supercowpowers/workbench.git

Read the Documentation

Workbench documentation: `Workbench Docs <http://workbench.readthedocs.org/en/latest/>`_

Email Lists (Forums)
~~~~~~~~~~~~~~~~~~~~

-  Users Email List:
   `workbench-users <https://groups.google.com/forum/#!forum/workbench-users>`_
-  Developers Email List:
   `workbench-devs <https://groups.google.com/forum/#!forum/workbench-devs>`_

.. _Workbench_Docs: http://workbench.readthedocs.org/en/latest/
.. _Users_Email_List: https://groups.google.com/forum/#!forum/workbench-users
.. _Developers_Email_List: https://groups.google.com/forum/#!forum/workbench-devs

.. |Build Status| image:: http://img.shields.io/travis/SuperCowPowers/workbench.svg?style=flat
    :target: https://travis-ci.org/SuperCowPowers/workbench
    :alt: Build Status

.. |Coverage Status| image:: https://img.shields.io/coveralls/SuperCowPowers/workbench.svg?style=flat
    :target: https://coveralls.io/r/SuperCowPowers/workbench

.. |Code Health| image:: https://landscape.io/github/SuperCowPowers/workbench/master/landscape.png
    :target: https://landscape.io/github/SuperCowPowers/workbench/master

.. |Project Stats| image:: https://www.ohloh.net/p/workbench/widgets/project_thin_badge.gif
    :target: https://www.ohloh.net/p/workbench

.. |Project Ready| image:: https://badge.waffle.io/supercowpowers/workbench.png?label=on_deck&title=On_Deck
    :target: https://waffle.io/supercowpowers/workbench

.. |Project InProgress| image:: https://badge.waffle.io/supercowpowers/workbench.png?label=In_Progress&title=In_Progress
    :target: https://waffle.io/supercowpowers/workbench

.. |Gitter chat| image:: https://badges.gitter.im/SuperCowPowers/workbench.png
   :target: https://gitter.im/SuperCowPowers/workbench

.. |Requirements| image:: https://requires.io/github/SuperCowPowers/workbench/requirements.png?branch=master
   :target: https://requires.io/github/SuperCowPowers/workbench/requirements/?branch=master
   :alt: Requirements Status

.. |Fury| image:: http://img.shields.io/pypi/v/workbench.svg?style=flat
    :target: http://badge.fury.io/py/workbench

.. |PyPI| image:: http://img.shields.io/pypi/dm/workbench.svg?style=flat
    :target: https://pypi.python.org/pypi/workbench

.. |License| image:: http://img.shields.io/badge/license-mit-brightgreen.svg?style=flat
    :target: https://github.com/SuperCowPowers/workbench/blob/master/LICENSE
    :alt: License