-
Notifications
You must be signed in to change notification settings - Fork 0
/
service_manifest.yml
45 lines (38 loc) · 1.1 KB
/
service_manifest.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
name: Martello
version: $SERVICE_TAG
description: >-
This service wraps the martello classifier
accepts: executable/windows/.*
rejects: empty|metadata/.*|executable/windows/dos|executable/windows/com
stage: CORE
category: Static Analysis
file_required: true
timeout: 60
disable_cache: false
enabled: true
is_external: false
licence_count: 0
config:
suspicious_thr: 0.8
malicious_thr: 0.95
benign_thr: 0.2
heuristics:
- description: This suspicious heuristic indicates file has possibility of being malware
filetype: "executable/windows"
heur_id: 1
name: Suspicious Martello classification
score: 200
- description: This malicious heuristic indicates high likelihood of file being malware
filetype: "executable/windows"
heur_id: 2
name: Malicious Martello classification
score: 500
- description: This benign heuristic indicates likelihood of file being benign
filetype: "executable/windows"
heur_id: 3
name: Benign Martello classification
score: 0
docker_config:
image: ${REGISTRY}cccs/assemblyline-service-martello:$SERVICE_TAG
cpu_cores: 1
ram_mb: 8192