search

HolmesProcessing / Holmes-Totem

Investigation Planner for fast running analysis with predictable execution time. For example, static analysis.
Apache License 2.0
29 stars 18 forks source link

Optimize method for passing variable service files #99

Open webstergd opened 8 years ago

webstergd commented 8 years ago

Services like Yara need a rule set. Right now we have a simple script in docker that downloads the ruleset. It works but is not pretty and prone to caching errors.

I am hesitant to leave this to the Service as it could cause unnecessary data transfers.

Options: 1) Have totem fetch the files and provide them via the ram drive. 2) Identify a better method for doing this via a Dockerfile 3) Have this managed by max's upcoming addition.

webstergd commented 8 years ago

Golang seems to have a potential solution via the docker file: https://github.com/docker-library/golang/blob/9f666dc2f4f51df564613f787d28b3a2353243e0/1.6/Dockerfile

If we go this method, we would still need a method for having tasking specific files passed. i.e. a yara rule set. This currently done over http.