crits/crits_services — pull request #22 by gtback (2014-07-02 14:53:57+00:00)
Title: Cuckoo Service

This service uses the [Cuckoo REST API](http://docs.cuckoosandbox.org/en/latest/usage/api/) to submit CRITS samples to Cuckoo Sandbox and retrieve the results of the analysis, including:

- processes executed
- files created or modified
- mutexes used
- registry keys created or modified

Any dropped files and the PCAP of network traffic generated during the analysis are also retrieved and stored in CRITs.

There are a variety of configuration options passed through to Cuckoo, including the analysis timeout, what sandbox machine to submit the sample to, and which analysis packages to run.

@Locker537 and @robertsjw also contributed heavily to this code. We've tested it on a couple Cuckoo instances, but would encourage anyone else interested in this to try it themselves and share their experiences.