search

spender-sandbox / cuckoo-modified

Modified edition of cuckoo
392 stars 178 forks source link

FR: ProcMon integration #485

Closed DigiAngel closed 6 years ago

DigiAngel commented 6 years ago

Hey all,

I attempted to get procmon integrated with cuckoo, but failed. I started procmon with the /Backingfile option that spools the PML file in the hopes that cuckoo would view it as a dropped file that I could download after analysis, but no luck. Is there a way to get this to function? Or way to convert the json report into something that procmon/procdot could read? Thank you.

DigiAngel commented 6 years ago

Closed to to lack of interest.