Skip to content
This repository was archived by the owner on Apr 26, 2021. It is now read-only.

Conversation

@cccs-kevin
Copy link

@cccs-kevin cccs-kevin commented Oct 14, 2020

Thanks for contributing! But first: did you read our community guidelines?
https://cuckoo.sh/docs/introduction/community.html

What I have added/changed is:
  • An Azure machinery for Cuckoo using Azure Virtual Machines
  • Ability to dynamically create machines on-demand
  • Ability to handle multiple pools of machines that have different OS types
  • Ability to specify OS type of VM you want submission to go to
The goal of my change is:

Use cloud resources for malware detonation

What I have tested about my change is:

Functionality, but only by hand.

Things to NOTE:

The Azure API has rate limits to how often you can submit requests. So far the current implementation of this machinery hits the API limit if it process 400 files per hour (each file requires a new VM which is created using a network interface card and a managed disk -> 3 write calls). Azure doc
I'm currently working on a method that utilizes Azure Virtual Machine Scale Sets with Ephemeral disks which avoid hitting this API limit.

@Dylan-J
Copy link

Dylan-J commented Oct 15, 2020

Man this is brilliant, good work @cccs-kevin!

cccs-kevin and others added 26 commits January 15, 2021 09:23
…ng logging, adding ability to acquire by machine_id
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants