search

TheHive-Project / Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine
https://thehive-project.org
GNU Affero General Public License v3.0
1.28k stars 217 forks source link

Missing FileInfo dependencies in Docker "withdeps" #428

Open Tux-Panik opened 1 year ago

Tux-Panik commented 1 year ago

Request Type

Bug

Work Environment

Question Answer
OS version (server) CentOS
OS version (client) 8
Cortex version / git hash 3.1.6-1
Package Type Docker (withdeps)

Problem Description

The FileInfo analyzer raises an exception, claiming that the module "stringsifter" doesn't exist. Traceback (most recent call last): File \"/opt/Cortex-Analyzers/analyzers/FileInfo/fileinfo_analyzer.py\ No module named 'stringsifter'",

Steps to Reproduce

Run a FileInfo analyzer from a freshly deployed Cortex container, which includes the dependencies.

Possible Solutions

From the Docker, run pip3 install -r /opt/Cortex-Analyzers/analyzers/FileInfo/requirements.txt to install several missing packages.

Complementary information

Then, the image should be saved and the configuration adapted in order to make the changes persistent.