CuckooDisplayReport
Display the contents of a Cuckoo report file from a war room entry.
python · Cuckoo Sandbox
Details
| ID | CuckooDisplayReport |
|---|---|
| Language | python |
| From Version | 5.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Tags | cuckoo |
README
Displays the contents of a Cuckoo report file from a War Room entry.
Script Data
| Name | Description |
|---|---|
| Script Type | python |
| Tags | cuckoo |
Dependencies
This script uses the following commands and scripts.
- ck-report
Inputs
| Argument Name | Description |
|---|---|
| reportentryid | The ID of the War Room entry containing the report file. |
| sections | The sections to show (comma-separated). Can be, “info”, “statistics”, “network”, “dropped”, “suricata”, “debug”, “procmemory”, “signatures”, “decompression”, “malfamily”, “behavior”, “target”, “malscore”, “static”, “feeds”, “strings”, or “virustotal”. |
| reportfilepath | The local file path to the report file. |
| reportdata | The report to be parsed. |
Outputs
There are no outputs for this script.
commonfields: id: CuckooDisplayReport version: -1 name: CuckooDisplayReport script: '' type: python subtype: python3 tags: - cuckoo comment: Display the contents of a Cuckoo report file from a war room entry. system: true args: - name: reportentryid default: true description: ID of the war room entry containing the report file - name: sections description: Sections to show (comma-separated). Sections are "info", "statistics", "network", "dropped", "suricata", "debug", "procmemory", "signatures", "decompression", "malfamily", "behavior", "target", "malscore", "static", "feeds", "strings", "virustotal" - name: reportfilepath description: Local file path to the report file - name: reportdata description: 'The report to be parsed ' scripttarget: 0 timeout: 0s fromversion: 5.0.0 dockerimage: demisto/python3:3.12.13.10116658 tests: - No tests (auto formatted)