Customization

This chapter explains how to customize Cuckoo. Cuckoo is written in a modular architecture built to be as much customizable it can, to fit all user’s needs.

• Analysis Packages
  • Getting started
    • cuckoo_run()
    • cuckoo_check()
    • cuckoo_finish()
  • Cuckoo Modules
    • cuckoo.checkprocess
    • cuckoo.execute
    • cuckoo.inject
    • cuckoo.monitor
• Processing of results
  • Retrieving details on a file
  • Processing behavioral analysis results
  • Processing network traffic
  • Putting all together
• Reporting Results
  • Built-in Reports
    • Reports for humans
      • Report TXT
      • Report HTML
    • MAEC Reports
      • MAEC Malware Metadata Sharing
      • MAEC Bundle Report
    • Data exports
      • JSON Dump
      • Pickle Dump
  • Writing your own reporting module