Package modules :: Package reporting :: Module mmdef :: Class MMDef
[hide private]
[frames] | no frames]

Class MMDef

source code

                        object --+    
                                 |    
lib.cuckoo.common.abstracts.Report --+
                                     |
                                    MMDef

Generates a MAEC Malware Metadata Sharing report.

Instance Methods [hide private]
 
run(self, results)
Writes report.
source code
 
addMetadata(self)
Generates header for MAEC xml and root components.
source code
 
addObjects(self)
Adds objects elements.
source code
 
createFileObject(self, f)
Creates a file object.
source code
 
getRelId(self)
Generates incremental relation id.
source code
 
addRelations(self)
Adds relationships.
source code
 
createRelation(self, action, src, dst)
Creates a relation between objects.
source code
 
createIpObject(self, ip)
Creates an single IP object, not an IP range object.
source code
 
createUriObject(self, req)
Creates URI object
source code
 
output(self)
Writes report to disk.
source code

Inherited from lib.cuckoo.common.abstracts.Report: __init__, set_options, set_path, set_task

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]

Inherited from lib.cuckoo.common.abstracts.Report: order

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

run(self, results)

source code 

Writes report.

Parameters:
  • results - Cuckoo results dict.
Raises:
Overrides: lib.cuckoo.common.abstracts.Report.run

createFileObject(self, f)

source code 

Creates a file object.

Parameters:
  • f - file hash representation from cuckoo dict results.
Returns:
file object.

getRelId(self)

source code 

Generates incremental relation id.

Returns:
generated id

createRelation(self, action, src, dst)

source code 

Creates a relation between objects.

Parameters:
  • action - relation type
  • src - relation source
  • dst - relation target
Returns:
relation object

createIpObject(self, ip)

source code 

Creates an single IP object, not an IP range object.

Parameters:
  • ip - IP address
Returns:
IP object

createUriObject(self, req)

source code 

Creates URI object

Parameters:
  • req - HTTP request as described in cuckoo dict
Returns:
created URI object