search

pandora-analysis / pandora

Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results
https://pandora.circl.lu/
GNU Affero General Public License v3.0
247 stars 38 forks source link

[IDEA] Pandora as a replacement for Viper Malware Repository? #213

Open ITSEC-DACHSER opened 1 year ago

ITSEC-DACHSER commented 1 year ago

We still use Viper Malware Repository as our internal repository to store malware. Unfortunately, the project is outdated and no longer actively maintained.

It looks like Pandora could be a replacement for Viper if there is a way to store data/malware persistently. Also, if the API (pypandora) has an option to download files for analysis, we could integrate it with our SOC automation (SOAR).

Are there any plans to enable such a feature? I know it is not the main focus of Pandora, but maybe an additional option.

Thanks!

Rafiot commented 1 year ago

Pandora is meant as a web service, we don't plan to have it as an analysis tool the way viper is (was).

It is possible to use pypandora to get information about a file out of pandora, but if a CLI similar to that viper offers comes up, it will be a new standalone project. It is not in the roadmap at least the next 6 months, but if you're interested in working on something like that, and there are missing features in PyPandora, let me know.