scVENUS/PeekabooAV

Use several Cuckoo instances

Opened this issue · 0 comments

It can be beneficial/desireable to use more than one Cuckoo Analyser / Cuckoo setup, with different configuration, machines ...

Expected Behavior

Give the possibility to configure peekaboo to access various Cuckoo instances via the APIs

Current Behavior

Only one Cuckoo can be / has to be configured and can be used

Possible Solution

Not only to supply several URLs of Cuckoo APIs as failsafe / equal alternatives but with an option to create different analysers that all are Cuckoo instances but can be used differently in the ruleset.

Steps to take

  1. Allow config sections to specify the individual representations of Cuckoo Analysers
  2. Configurable identifiers for expression rules of type Cuckoo Analyser