Index

_

_positions (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute)

_rows (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute)

A

add_heading() (in module ciberlabreport.pdf.pdf_generator) afterFlowable() (ciberlabreport.pdf.doc_template.CiberlabDocTemplate method)

ai_model (ciberlabreport.settings.AppSettings attribute), [1] AppSettings (class in ciberlabreport.settings)

B

box_height (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute) build_annex_img() (in module ciberlabreport.pdf.sections) build_annex_proctree() (in module ciberlabreport.pdf.sections) build_behavior_summary() (in module ciberlabreport.pdf.sections) build_disclaimer_section() (in module ciberlabreport.pdf.sections) build_executive_summary() (in module ciberlabreport.pdf.sections) build_family_summary() (in module ciberlabreport.pdf.sections)

build_file_info_table() (in module ciberlabreport.pdf.tables) build_file_ioc_table() (in module ciberlabreport.pdf.tables) build_hashes_section() (in module ciberlabreport.pdf.sections) build_signatures_table() (in module ciberlabreport.pdf.tables) build_solution() (in module ciberlabreport.pdf.sections) build_user_images_for_pdf() (ciberlabreport.llm.openai.OpenAIWrapper method) build_user_images_to_call() (ciberlabreport.llm.openai.OpenAIWrapper method)

C

call() (ciberlabreport.llm.openai.OpenAIWrapper method) (ciberlabreport.preprocesing.virustotal.VirusTotalWrapper method) call_init_text_with_retry() (ciberlabreport.llm.openai.OpenAIWrapper method) CapeReducer (class in ciberlabreport.preprocesing.cape) categories (ciberlabreport.preprocesing.virustotal.VTThreatProfile attribute) check_store_result() (ciberlabreport.preprocesing.virustotal.VirusTotalWrapper method) CiberlabDocTemplate (class in ciberlabreport.pdf.doc_template) ciberlabreport module ciberlabreport.core module ciberlabreport.llm module ciberlabreport.llm.openai module ciberlabreport.pdf module ciberlabreport.pdf.cover_page module ciberlabreport.pdf.doc_template module ciberlabreport.pdf.fonts module ciberlabreport.pdf.layout module ciberlabreport.pdf.pdf_generator module ciberlabreport.pdf.proctree module

ciberlabreport.pdf.sections module ciberlabreport.pdf.styles module ciberlabreport.pdf.tables module ciberlabreport.pdf.validation module ciberlabreport.postprocesing module ciberlabreport.postprocesing.cleaner module ciberlabreport.preprocesing module ciberlabreport.preprocesing.cape module ciberlabreport.preprocesing.utils module ciberlabreport.preprocesing.virustotal module ciberlabreport.settings module clean() (ciberlabreport.postprocesing.cleaner.TextCleaner method) compact_list() (in module ciberlabreport.preprocesing.utils) confidence_level (ciberlabreport.preprocesing.virustotal.VTVerdict attribute) config_path (ciberlabreport.settings.AppSettings attribute), [1] cover_page() (in module ciberlabreport.pdf.cover_page) CoverPage (class in ciberlabreport.pdf.cover_page) create_pdf_from_json() (ciberlabreport.pdf.pdf_generator.PDFGenerator method) create_stats() (ciberlabreport.llm.openai.OpenAIWrapper method)

D

decide_ransomware() (ciberlabreport.llm.openai.OpenAIWrapper method) draw() (ciberlabreport.pdf.proctree.ProcessTreeFlowable method)

draw_header_footer() (in module ciberlabreport.pdf.layout) drop_empty() (in module ciberlabreport.preprocesing.utils)

E

evasion_indicators (ciberlabreport.preprocesing.virustotal.VTSandboxSignals attribute)

evasion_keywords (ciberlabreport.preprocesing.virustotal.VTConfig attribute)

F

families_list (ciberlabreport.settings.AppSettings attribute) family (ciberlabreport.preprocesing.virustotal.VTThreatProfile attribute) family_confidence (ciberlabreport.preprocesing.virustotal.VTThreatProfile attribute)

first_or_value() (in module ciberlabreport.preprocesing.utils) font_name (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute) font_size (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute) from_env() (ciberlabreport.core.ReportGenerator class method)

G

generate() (ciberlabreport.core.ReportGenerator method) generate_report() (ciberlabreport.llm.openai.OpenAIWrapper method) get_ciberlab_styles() (in module ciberlabreport.pdf.styles)

get_data() (ciberlabreport.preprocesing.virustotal.VirusTotalWrapper method) get_file() (ciberlabreport.llm.openai.OpenAIWrapper method) get_process_tree() (ciberlabreport.preprocesing.cape.ProcessTree method)

H

h_padding (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute)

high_threshold (ciberlabreport.preprocesing.virustotal.VTConfig attribute) highlights (ciberlabreport.preprocesing.virustotal.VTYaraSummary attribute)

I

ImageProcessor (class in ciberlabreport.preprocesing.cape) img_threshold (ciberlabreport.settings.AppSettings attribute), [1] indent (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute) input_path_default (ciberlabreport.settings.AppSettings attribute), [1]

is_destination_valid() (in module ciberlabreport.pdf.validation) is_malicious (ciberlabreport.preprocesing.virustotal.VTVerdict attribute) is_ransomware (ciberlabreport.preprocesing.virustotal.VTFinalData attribute) is_unlimited() (ciberlabreport.preprocesing.cape.PreprocessLimits static method)

L

load_settings() (in module ciberlabreport.settings)

M

malicious_engines (ciberlabreport.preprocesing.virustotal.VTVerdict attribute) malicious_sandboxes (ciberlabreport.preprocesing.virustotal.VTSandboxSignals attribute) malware_names (ciberlabreport.preprocesing.virustotal.VTSandboxSignals attribute) max_anomalies (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_api_results (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_category_results (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_command_line (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_completion_tokens (ciberlabreport.settings.AppSettings attribute), [1] max_configs (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_dns (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_domains (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_dropped_files (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_enhanced_events (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_files (ciberlabreport.settings.AppSettings attribute), [1] max_hosts (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_http (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_module_path (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_mutexes (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_network_entries (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_payloads (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_processes (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_services (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_signature_description (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_signature_examples (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_signatures (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_statistics_list (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_summary_examples (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1]

max_ttps (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] max_yara (ciberlabreport.preprocesing.cape.PreprocessLimits attribute), [1] medium_threshold (ciberlabreport.preprocesing.virustotal.VTConfig attribute) mode (ciberlabreport.settings.AppSettings attribute), [1] module ciberlabreport ciberlabreport.core ciberlabreport.llm ciberlabreport.llm.openai ciberlabreport.pdf ciberlabreport.pdf.cover_page ciberlabreport.pdf.doc_template ciberlabreport.pdf.fonts ciberlabreport.pdf.layout ciberlabreport.pdf.pdf_generator ciberlabreport.pdf.proctree ciberlabreport.pdf.sections ciberlabreport.pdf.styles ciberlabreport.pdf.tables ciberlabreport.pdf.validation ciberlabreport.postprocesing ciberlabreport.postprocesing.cleaner ciberlabreport.preprocesing ciberlabreport.preprocesing.cape ciberlabreport.preprocesing.utils ciberlabreport.preprocesing.virustotal ciberlabreport.settings

N

normalize() (ciberlabreport.preprocesing.virustotal.VirusTotalWrapper method)

O

obtain_signatures() (ciberlabreport.preprocesing.cape.SampleSignatures method) openai_api_key (ciberlabreport.settings.AppSettings attribute), [1]

OpenAIWrapper (class in ciberlabreport.llm.openai) output_path_default (ciberlabreport.settings.AppSettings attribute), [1]

P

PDFGenerator (class in ciberlabreport.pdf.pdf_generator) PreprocessLimits (class in ciberlabreport.preprocesing.cape) process() (ciberlabreport.preprocesing.cape.ImageProcessor method)

ProcessTree (class in ciberlabreport.preprocesing.cape) ProcessTreeFlowable (class in ciberlabreport.pdf.proctree) prompts_path (ciberlabreport.settings.AppSettings attribute), [1]

R

ransom_pattern (ciberlabreport.preprocesing.virustotal.VTConfig attribute) ransomware_evidence (ciberlabreport.preprocesing.virustotal.VTFinalData attribute) read_hash_from_raw() (ciberlabreport.preprocesing.virustotal.VirusTotalWrapper method) read_keys_list_env() (ciberlabreport.core.ReportGenerator static method)

reduce_report() (ciberlabreport.preprocesing.cape.CapeReducer method) register_font_family() (in module ciberlabreport.pdf.fonts) ReportGenerator (class in ciberlabreport.core) roots (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute) row_height (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute)

S

SampleSignatures (class in ciberlabreport.preprocesing.cape) sandbox_signals (ciberlabreport.preprocesing.virustotal.VTFinalData attribute) schemas_path (ciberlabreport.settings.AppSettings attribute), [1] search_url (ciberlabreport.preprocesing.virustotal.VTConfig attribute)

sha256 (ciberlabreport.preprocesing.virustotal.VTFinalData attribute) split() (ciberlabreport.pdf.proctree.ProcessTreeFlowable method) suggested_label (ciberlabreport.preprocesing.virustotal.VTThreatProfile attribute) suspicious_engines (ciberlabreport.preprocesing.virustotal.VTVerdict attribute)

T

TextCleaner (class in ciberlabreport.postprocesing.cleaner) threat_profile (ciberlabreport.preprocesing.virustotal.VTFinalData attribute)

tmp_path (ciberlabreport.settings.AppSettings attribute), [1] top_from_counter() (in module ciberlabreport.preprocesing.utils) trim_text() (in module ciberlabreport.preprocesing.utils)

V

v_padding (ciberlabreport.pdf.proctree.ProcessTreeFlowable attribute) verdict (ciberlabreport.preprocesing.virustotal.VTFinalData attribute) VirusTotalWrapper (class in ciberlabreport.preprocesing.virustotal) vt_api_keys (ciberlabreport.settings.AppSettings attribute), [1] VTConfig (class in ciberlabreport.preprocesing.virustotal)

VTFinalData (class in ciberlabreport.preprocesing.virustotal) VTSandboxSignals (class in ciberlabreport.preprocesing.virustotal) VTThreatProfile (class in ciberlabreport.preprocesing.virustotal) VTVerdict (class in ciberlabreport.preprocesing.virustotal) VTYaraSummary (class in ciberlabreport.preprocesing.virustotal)

W

wrap() (ciberlabreport.pdf.proctree.ProcessTreeFlowable method)

Y

yara_summary (ciberlabreport.preprocesing.virustotal.VTFinalData attribute)