cuckoobox/cuckoo — pull request #340 by jhumble (2014-06-25 21:43:33+00:00)
Title: MultiProcessed Signature/Report Processing

Added analysisproc.py to multiprocess signatures/reports. This avoids performance limitations due to the GIL when using a large number of sandboxes.

You can utilize this module by disabling process_results in cuckoo.conf and keeping analysisproc.py running. It will pull jobs with a status of 'completed' from the database, run report processing and signatures, and mark the job as 'reported'.

Another benefit of using multiprocessing is that it will load and run new signatures as they are added to the cuckoo/modules/signatures directory without requiring a restart of cuckoo or analysisproc.py.