Michael Weiser

amce-client has a hard dependency on LibreSSL through the use of libtls. The PRNG in LibreSSL does not need initialization ever since its first portable release 2.0.0. Both RAND_status() and...

Based on OpenBSD: commit 0b28b2477f6d74bf4bf4a54f9268ed15712317a7 Author: florian Date: Mon Nov 27 01:58:52 2017 +0000 Deprecate agreement url config option and get the information from the directory call. This way we...

colorclass dependency causes incompatibility with CPython 3.10

3

`oletools.olevba` will fail on import in the `colorclass` dependency in CPython 3.10: ``` $ oletools/bin/python3.10 -c "import oletools.olevba" Traceback (most recent call last): File "", line 1, in File "/oletools/lib/python3.10/site-packages/oletools/olevba.py",...

**Is your feature request related to a problem? Please describe.** [We](https://github.com/scVENUS/PeekabooAV)'d like to use DRAKVUF Sandbox for automated malware analysis and blocking. What seems to be missing currently is any...

Reboot pending duration indicator

1

Hi Marcus, is there an easy way to tell how long a reboot has been pending on a machine? My use-case is that I want to give users some time...

Knowntools efficiency improvements take two

5

There is some room for improvement in the way Knowntools uses the database. In quick tests, analysis time of 1000 identical samples would go up from 14s with an empty...

Early shutdown not working due to switch to asyncio signal handler

1

Because we needed to switch the signal handler to asyncio in 9051be993ec55335f28db05e39a22726cef647f0, retries in cuckoo and cortex connectivity checks can no longer be aborted and shutdown will only happen after...

Currently the names and versions of Cortex analysers are hardcoded and we just expect them to be available. We could make them configurable via a config file. But using the...

Add mechanism to synthetically test entire pipeline

1

We could use a mechanism to make sure that the whole peekaboo/cuckoo pipeline works, ideally without submitting and including in the distribution any actual or test malware. The vision is...

In one peculiar case Excel creates a link to the user's Documents folder in its `%AppData%\Microsoft\Office\Recent` folder named `Eigene Dokumente.LNK`. This matches Cuckoo signature `Creates executable file in filesystem` which...