cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.54k stars 1.7k forks source link

Analysed data move to different location #1750

Open seantree opened 7 years ago

seantree commented 7 years ago

Hello Team,

Is there any way to move the the samples binary with the analysed data to different location or different server once the analysed has been done. For example: Right now I am running cuckoo sandbox on my base machine I want to move the analysed data to my different server, I want after each analysis analysed data will move to the server, so that it will save the space on my machine. . I hope you get my point. . Waiting for some positive solution. . Thanks & Regards Seantree

jbremer commented 7 years ago

You can either delete the binaries after an analysis has been performed (using the delete_bin_copy & delete_original configuration options) and/or use Distributed Cuckoo.

seantree commented 7 years ago

Hi @jbremer Thank you for your reply I don't want to delete the data I just want to move the data to different server, is there any option is available to give the path of the server location the data will move it to that location after the completion of analysis?

seantree commented 7 years ago

@jbremer Kindly close the ticket, I solved this problem. :)

tUn4 commented 7 years ago

Hi @seantree : Can you let me know how you can solved it? I've faced same issue like this.

jbremer commented 7 years ago

You can write a Reporting module (with some additional changes here and there) to do whatever you like with the binaries and analysis data after the reports have been generated if you really want to do this. Not sure why this is useful though, as you're already submitting samples to Cuckoo, so you should normally have a backup already. Anyway, will leave this open for @seantree to reply to @tUn4, but closing it soon'ish ;-)

seantree commented 7 years ago

Hi @tUn4

I have just move all my analyzes data to different location through the scp -r command.

Thanks & Regards Seantree