Package: intezer-analyze-cli
intezer-analyzeA cross-platform CLI tool which enables analyzing files with Intezer Analyze.PrerequisitesPython 3.6 and abovePython and pip should be available in your pathInstallationpip install intezer-analyze-cliUsageProxiesThe CLI supports proxies. To use a proxy, set the environment variableHTTP_PROXYorHTTPS_PROXYto the proxy address.LoginTo begin using the cli, first you should login with your API key:intezer-analyze login <api_key>If you are running the CLI against an on premise deployment, enter the url:intezer-analyze login <api_key> http://<address>/apiAnalyzeSend a file or a directory for analysis in Intezer Analyze.Usageintezer-analyze analyze PATHParametersPATH: Path to file or directory to send the files inside for analysis.Examples:Send a single file for analysis:$ intezer-analyze analyze C:\threat.exeSend all files in directory for analysis:$ intezer-analyze analyze C:\files-to-analyzeFor complete documentation please runintezer-analyze analyze --helpAnalyze hashes fileSend a text file with list of hashesUsageintezer-analyze analyze_by_list PATHParametersPATH: Path to txt file.ExampleSend txt file with hashes for analysis:$ intezer-analyze analyze_by_list ~/files/hashes.txtFor complete documentation please runintezer-analyze analyze_by_list --helpIndexSend a file or a directory for indexingUsageintezer-analyze index PATH INDEX_AS [FAMILY_NAME]ParametersPATH: Path to file or directory to indexINDEX_AS:maliciousortrustedFAMILY_NAME: The family name (optional)Exampleindex a single file:$ intezer-analyze index ~/files/threat.exe.sample malicious family_nameindex all files in directory:$ intezer-analyze index ~/files/files-to-index trustedFor complete documentation please runintezer-analyze index --helpIndex hashes fileSend a text file with list of hashes to indexUsageintezer-analyze index_by_list PATH --index-as=INDEX [FAMILY_NAME]ParametersPATH: Path to txt file--index-as:maliciousortrustedFAMILY_NAME: The family name (optional)ExampleSend a file with hashes and verdict for indexing:$ intezer-analyze index_by_list ~/files/hashes.txt --index-as=malicious family_nameFor complete documentation please runintezer-analyze index --helpUpload offline endpoint scanUpload an offline scan created by running the Intezer Endpoint Scanner with '-o' flagUsageintezer-analyze upload_endpoint_scan OFFLINE_SCAN_DIRECTORYParametersOFFLINE_SCAN_DIRECTORY: Path to directory with offline endpoint scan resultsExamples:Upload a directory with offline endpoint scan results:$ intezer-analyze upload_endpoint_scan /home/user/offline_scans/scan_MYPC_2019-01-01_00-00-00For complete documentation plrase runintezer-analyze upload_endpoint_scan --helpUpload multiple offline endpoint scansUpload multiple offline scans created by running the Intezer Endpoint Scanner with '-o' flagUsageintezer-analyze upload_endpoint_scans_in_directory OFFLINE_SCANS_ROOT_DIRECTORYParametersOFFLINE_SCANS_ROOT_DIRECTORY: Path to root directory containing offline endpoint scan resultsExamples:Upload a directory with offline endpoint scan results:$ intezer-analyze upload_endpoint_scans /home/user/offline_scansFor complete documentation please runintezer-analyze upload_endpoint_scans_in_directory --helpUpload all subdirectories with .eml files to analyzeUpload a directory with .eml filesParameterUPLOAD_EMAILS_IN_DIRECTORY: Path to root directory containing the .eml fielsExamples:$ intezer-analyze upload_emails_in_directory /path/to/emails_root_directoryTroubleshootingThe cli produce a log file namedintezer-analyze-cli.login the current working directory.
To enable console output, set the environment variableINTEZER_DEBUG=1.