Skip to content

Conversation

@peterglock
Copy link

Readme for MazeRunner Get-Details

This program utilises the MazeRunner SDK to connect to one or more MazeRunner instances and download summary details of Decoys, Services, and Breadcrumbs that are configured on the instance

Setup

  1. Extract the zip file containing the executable and all necessary library files
  2. Create API keys on each instance you want to connect to and download the certificate from that instance onto the machine where you are running the program
  3. Modify 'config.txt' (there's a sample in the distribution) with the API keys and path to the certificate. For more than one instance,
    copy the sample '[server1]' into a new section below, rename to '[server2] and add the correct API keys and certificate path.
  4. Now you have your keys in a file, protect it by creating a password-protected zip file

Using

  1. Open a windows command prompt and cd to the directory which contains 'get_details.exe'
  2. To run the program, type get_details "path\to\config zipfile"
  3. Enter the zipfile password when prompted
  4. Either read the output in the console, or, if you want to save it, run get_details "path\to\config zipfile"`> \path\to\savefile

get_details.zip

Yochai Blumenfeld and others added 30 commits April 3, 2017 12:08
* small fix that significantly speeds up work with alerts
Approved-by: Yochai Blumenfeld <yochaibl@gmail.com>
New Sample file: Upload files to Cuckoo

* New Sample file:
    Upload files to Cuckoo

* New Sample file:
    Upload files to Cuckoo

* New Sample file:
    Upload files to Cuckoo

* Updates to script recommended by Imri

* Updates

* Updates to the files based on comments from Yochai and Imri

* Updates to fix ambigious wording. Also brought creation of API URL into the code and a few minor edits recommended by Yochai.

* Updated code to include a date variable that limits which alerts are sent to Cuckoo. Streamlined validation checking

* Revert "Updated code to include a date variable that limits which alerts are sent to Cuckoo. Streamlined validation checking"

    This reverts commit d69052aceeda2439124c2a42e6febca5315a8efd.

* Added back --skip-verification flag to args.

Approved-by: Yochai Blumenfeld <yochaibl@gmail.com>
MAZ-3319

Approved-by: Yochai Blumenfeld <yochaibl@gmail.com>
Endpoint creation from SDK MAZ-3196
Approved-by: Nadav Lev <nadav@cymmetria.com>
wait for background task finish before start new deploy MAZ-3947
set a bigger timeout for download ova decoys
MAZ-4108 add test to create service type that does not exists
MAZ-4233 Multiple promisc changes
cymmetriagalsinger and others added 9 commits April 30, 2018 18:04
fix documentation

Approved-by: Yochai Blumenfeld <yochaibl@gmail.com>
Support creating breadcrumbs w/ files + test honeydoc download

Approved-by: Nadav Lev <nadav@cymmetria.com>
Approved-by: Yochai Blumenfeld <yochaibl@gmail.com>
Feature/MAZ-5445 Allow access to the AuditLog Via the SDK and the API
Also change the date format of  some of MazeRunner's dates from dd/mm/yyyy to yyyy-mm-dd for better functionality on the API's side

Approved-by: Dekel <dekel@cymmetria.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants