-
Notifications
You must be signed in to change notification settings - Fork 1
/
service_manifest.yml
42 lines (34 loc) · 861 Bytes
/
service_manifest.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
name: CAPA
version: $SERVICE_TAG
description: >-
This service uses the CAPA open source library to identify what the program at hand could do.
accepts: executable/windows/.*
rejects: empty|metadata/.*|executable/windows/dos|executable/windows/com
stage: CORE
category: Static Analysis
file_required: true
timeout: 300
disable_cache: false
enabled: true
is_external: false
licence_count: 0
privileged: true
config:
max_file_size: 512000
submission_params:
- default: "default"
name: renderer
type: list
value: "default"
list: ["default", "simple", "verbose"]
heuristics:
- description: CAPA found some ATT&CK IDs
filetype: "executable/windows"
heur_id: 1
name: ATT&CK ID Found
score: 0
docker_config:
image: ${REGISTRY}cccs/assemblyline-service-capa:$SERVICE_TAG
cpu_cores: 1
ram_mb_min: 3078
ram_mb: 4096