File tree 1 file changed +22
-0
lines changed
1 file changed +22
-0
lines changed Original file line number Diff line number Diff line change @@ -49,6 +49,28 @@ For example:
49
49
50
50
// FIXME
51
51
52
+ === Customization
53
+
54
+ You can modify (add, modify or delete) registry keys, directories and files like this:
55
+
56
+ Registry keys:
57
+
58
+ ./malboxes.py registry profile modtype key name value valuetype
59
+
60
+ Ex: ./malboxes registry win10_64_analyst add HKCU:\Software Malboxes IsAwesome String
61
+
62
+ Directories and files:
63
+
64
+ ./malboxes.py directory profile modtype dirpath
65
+
66
+ Ex: ./malboxes.py directory BadAPT57 delete C:\Windows\System32
67
+
68
+ You can add packages to install that are specific to the profile:
69
+
70
+ ./malboxes.py package profile package
71
+
72
+ Ex: ./malboxes.py package RansomwareThatINeedRevengeOn chrome
73
+
52
74
== Credits
53
75
54
76
After I had the idea for an improved malware analyst workflow based on what
You can’t perform that action at this time.
0 commit comments