Usage

This chapter explains how to use CAPE.

• Starting CAPE
  • Poetry users
  • Troubleshooting
    • PermissionError: [Errno 13] Permission denied: '/opt/CAPEv2/log/cuckoo.log'
    • CuckooCriticalError: Cannot bind ResultServer on port 2042 because it was in use, bailing
    • CuckooCriticalError: Unable to bind Result server on <IP> [Errno 99]
  • Starting processing data generated by virtual machine
• CAPE internals
  • CAPE base core components
  • CAPE advanced core components
  • How CAPE processing works?
• Submit an Analysis
  • Submission Utility
    • --options Options Available
  • Web Interface
  • API
  • Distributed CAPE
  • Python Functions
    • add_path()
    • add_url()
  • Troubleshooting
    • submit.py
  • Analysis results
• Web interface
  • Configuration
    • Enable web interface auth
    • Enable/Disable REST API Endpoints
  • Usage
  • Subscription
  • Exposed to internet
  • Best practices for production
    • Gunicorn
    • NGINX
      • Let’s Encrypt certificates
  • Some extra security TIP(s)
  • Troubleshooting
    • Login error: no such column: users_userprofile.reports
    • No such table: auth_user
• REST API
  • CAPE throttling, aka requests per minute/hour/day.
• api.py DEPRECATED
  • Resources
    • /tasks/create/file
    • /tasks/create/url
    • /tasks/list
    • /tasks/view
    • /tasks/delete
    • /tasks/report
    • /tasks/screenshots
    • /files/view
    • /files/get
    • /pcap/get
    • /machines/list
    • /machines/view
    • /cuckoo/status
• Distributed CAPE
  • Dependencies
  • Starting the Distributed REST API
  • RESTful resources
    • GET /node
    • POST /node
    • GET /node/<name>
    • PUT /node/<name>
    • DELETE /node/<name>
  • Quick usage
  • Proposed setup
    • Configuration settings
      • custom/conf/cuckoo.conf
      • custom/conf/processing.conf
      • custom/conf/reporting.conf
      • custom/conf/distributed.conf
    • Register CAPE nodes
    • VM Maintenance
    • Good practice for production
• CAPE advanced administration
  • WIP YET!
  • Dependencies
    • SSH Pivoting explained
    • Comparing files
    • The rest of the possibilities
• Analysis Packages
• Analysis Results
  • analysis.conf
  • analysis.log
  • dump.pcap
  • memory.dmp
  • files/
  • logs/
  • reports/
  • shots/
• Clean all Tasks and Samples
• CAPE Rooter
  • Virtualenv
  • CAPE Rooter Usage
• Utilities
  • Cleanup utility
  • Submission Utility
  • Web Utility
  • Processing Utility
  • Community Download Utility
  • Database migration utility
  • Stats utility
  • Machine utility
• Performance
  • Processing
    • Evented signatures
    • Reporting
    • Ram-boost
• CAPE’s debugger
  • Breakpoints: bp0, bp1, bp2, bp3
  • Depth
  • Count
  • Break-on-return
  • Base-on-api
  • Base-on-alloc
  • Actions
  • Type
  • br0, br1, br2, br3
  • Fake-rdtsc
  • Practical examples
  • Importing instruction traces into disassembler
• Interactive session
  • Installation
  • Web server configuration
  • Virtual machine configuration
  • Having troubles?
• Pattern replacement
  • Cleaning Operation system patterns.
  • Cleaning Network patterns as IP(s)/Domains.