airbnb / airbnb/binaryalert

CLI Command to Generate Summary CSV

Open
#106 0 comments 0 reactions 0 assignees View on GitHub
cli
Dominant language
Python
Stars
1.5k
Forks
179
PR merge metrics
No merged PRs in 30d

Description

## Background

During a batch analysis, all YARA match results are saved to Dynamo. However, SNS alerts are not sent for these matches if they were already matched in a previous version of the analyzers.

It can be very useful to see a summary of all of the YARA matches from the current versions of the analyzers, which will include malware or other YARA matches that may have been matched long ago.

## Desired Change

Add a command to the CLI to generate a CSV summary of the latest YARA matches, e.g. `manage.py generate_match_report`

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the CLI entry point in manage.py and trace how YARA match results are stored in Dynamo. The command should generate a CSV summary of the latest matches from the current analyzer versions; verify that the report includes matches that were found in earlier analyzer versions.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, python
Domain
cli, cloud, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.