DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
In situations where a YARA_REPO has not been set in the mwcp configuration, the --yara-repo argument would enable setting the repository on the command line.
However, it is missing from the cli, as an option for pytest, and from usage when testing parsers.
Requesting its addition for the proposed use case, where it is otherwise a silent failure.
In situations where a
YARA_REPO
has not been set in themwcp
configuration, the--yara-repo
argument would enable setting the repository on the command line.However, it is missing from the cli, as an option for pytest, and from usage when testing parsers.
Requesting its addition for the proposed use case, where it is otherwise a silent failure.