O lenei tusiga o le a aoga ia i latou e masani i tekinolosi Siaki Point e ala i le faila faila (Fa'aa'oa'oga Fa'amata'u) ma fa'amama faila (Ave'esea Fa'amata'u) ma e manaʻo e fai se laʻasaga i le faʻautometi o nei galuega. E iai le Check Point , lea e tamo'e uma i le ao ma luga o masini fa'apitonu'u, ma e tutusa lelei ma le siakiina o faila i luga o le upega tafaʻilagi / smtp / ftp / smb / nfs auala feoaiga.. O lenei tusiga o se vaega o le faʻamatalaga a le tusitala o se seti o tala mai faʻamaumauga aloaia, ae faʻavae i luga o loʻu lava faʻaogaina o le poto masani ma aʻu lava faʻataʻitaʻiga. I totonu foi o le tusiga o le ae maua ai le tusitala o le Postman collections mo le galulue faatasi ma le Threat Prevention API.
Faapuupuu faavae
Ole Threat Prevention API e galue i vaega autu e tolu, lea e taʻua i le API e ala i faʻamaumauga nei:
av - Vaega Anti-Virus, e nafa ma au'ili'ili saini o fa'amata'u iloa.
te - Vaega Fa'amata'u Fa'aa'oa'oga, e nafa ma le siakiina o faila i totonu o le sandbox, ma le faia o se fa'ai'uga leaga/fa'aleaga pe a uma le fa'ata'ita'iga.
aveʻesega - Vaega Fa'amata'u Fa'amata'u, e nafa ma le vave fa'aliliuina o fa'amaumauga a le ofisa i se faiga saogalemu (lea e 'ave'esea ai mea uma e ono leaga), ina ia vave tu'uina atu i tagata fa'aoga / faiga.
API fausaga ma tapula'a autu
Fa'amata'u Fa'amata'u API fa'aaogaina na'o le 4 talosaga − lafo, fesili, download ma le fa'asoa. I le ulutala mo talosaga uma e fa e te manaʻomia e pasi le ki API e faʻaaoga ai le parakalafa Faatagaina. I le tepa muamua, o le fausaga e foliga mai e sili atu le faigofie nai lo totonu , ae o le numera o fanua i totonu o le faʻapipiʻiina ma faʻamatalaga talosaga ma le fausaga o nei talosaga e fai si lavelave. E mafai ona fa'atusaina fa'atatau i fa'amatalaga Fa'amata'u Fa'amata'u i totonu o se faitoto'a/pusa oneone faiga fa'avae puipui.
I le taimi nei, na o le pau lava le lomiga o le Fa'amata'u Fa'amata'u API ua tatalaina - 1.0 le URL mo API valaau e tatau ona aofia ai v1 i le vaega e te manaʻomia e faʻamaonia ai le faʻasologa. E le pei o le Pulega API, e tatau ona faʻaalia le API version i le URL, a leai o le a le faia le talosaga.
Ole vaega Anti-Virus, pe a vala'au e aunoa ma isi vaega (te, extraction), o lo'o na'o le lagolagoina o talosaga fa'atatau ile md5 hash sums. O le Fa'aa'oa'oga Fa'amata'u ma le Fa'amata'u Fa'amata'u e lagolagoina fo'i le aofa'i o le sha1 ma le sha256.
E taua tele le aua le faia ni mea sese i fesili! O le talosaga e mafai ona faʻatinoina e aunoa ma se mea sese, ae le atoatoa. Va'ai la'ititi i luma, se'i o tatou va'ai po'o le a le mea e tupu pe a iai ni fa'aletonu/typos i fesili.
Talosaga fa'atasi ai ma se fa'aoga i le upu lipoti(lipoti)
{ "request": [
{
"sha256": {{sha256}},
"features": ["te"] ,
"te": {
"images": [
{
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
reportss: ["tar", "pdf", "xml"]
}
}
]
}O le a leai se mea sese i le tali, ae o le a leai se faʻamatalaga e uiga i lipoti
{
"response": [
{
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
},
"sha256": "9cc488fa6209caeb201678f8360a6bb806bd2f85b59d108517ddbbf90baec33a",
"file_type": "pdf",
"file_name": "",
"features": [
"te"
],
"te": {
"trust": 10,
"images": [
{
"report": {
"verdict": "malicious"
},
"status": "found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"score": -2147483648,
"combined_verdict": "malicious",
"severity": 4,
"confidence": 3,
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
}
}
}
]
}Ae mo se talosaga e aunoa ma se typo i lipoti ki
{ "request": [
{
"sha256": {{sha256}},
"features": ["te"] ,
"te": {
"images": [
{
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
reports: ["tar", "pdf", "xml"]
}
}
]
}Matou te maua se tali ua uma ona iai id mo le la'uina o lipoti
{
"response": [
{
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
},
"sha256": "9cc488fa6209caeb201678f8360a6bb806bd2f85b59d108517ddbbf90baec33a",
"file_type": "pdf",
"file_name": "",
"features": [
"te"
],
"te": {
"trust": 10,
"images": [
{
"report": {
"verdict": "malicious",
"full_report": "b684066e-e41c-481a-a5b4-be43c27d8b65",
"pdf_report": "e48f14f1-bcc7-4776-b04b-1a0a09335115",
"xml_report": "d416d4a9-4b7c-4d6d-84b9-62545c588963"
},
"status": "found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"score": -2147483648,
"combined_verdict": "malicious",
"severity": 4,
"confidence": 3,
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
}
}
}
]
}Afai matou te lafoina se ki API sese / muta, matou te maua se mea sese 403 i le tali.
SandBlast API: i le ao ma luga o masini faʻapitonuʻu
O talosaga API e mafai ona lafo i masini Siaki Point o lo'o fa'aogaina le vaega Fa'amata'u (lau). I le avea ai o se tuatusi mo talosaga, e tatau ona e faʻaogaina le ip/url o le masini ma le port 18194 (mo se faʻataʻitaʻiga, https://10.10.57.19:18194/tecloud/api/v1/file/query). E tatau foi ona e mautinoa o le puipuiga malu i luga o le masini e mafai ai lenei sootaga. Fa'atagaga e ala i le API key i masini fa'apitonu'u e ala i le fa'aletonu ese ma le Fa'atagaga ki i ulutala talosaga e le mafai ona auina atu.
API talosaga i le CheckPoint ao e tatau ona lafo i te.checkpoint.com (fa'ata'ita'iga - https://te.checkpoint.com/tecloud/api/v1/file/query). E mafai ona maua le ki API e fai ma laisene fa'ata'ita'i mo le 60 aso e ala i le fa'afeso'ota'i o paaga Check Point po'o le ofisa fa'apitonu'u a le kamupani.
I masini fa'apitonu'u, e le'o lagolagoina le Fa'amata'u Fa'amata'u e pei o tulaga masani. ma e tatau ona faʻaaogaina (O le a tatou talanoa atili i ai i le faaiuga o le tusiga).
E le lagolagoina e masini fa'apitonu'u le talosaga o le tau.
A leai, e leai se eseesega i le va o talosaga i masini faʻapitonuʻu ma le ao.
Tu'u mai le API telefoni
Metotia na fa'aaogaina − POST
tuatusi telefoni - https:///tecloud/api/v1/file/upload
O le talosaga e aofia ai vaega e lua (form-data): o se faila e faʻamoemoe mo faʻataʻitaʻiga / faʻamamaina ma se tino talosaga ma tusitusiga.
E le mafai ona gaogao le talosaga tusitusia, ae atonu e leai se faatulagaga. Ina ia manuia le talosaga, e tatau ona e auina atu a itiiti mai o tusitusiga nei i le talosaga:
La'iti e mana'omia mo se talosaga e lafo i luga
HTTP POST
https:///tecloud/api/v1/file/upload
Ulutala:
Faatagaina:
tino
{
"talosaga": {
}
}
faila
faila
I lenei tulaga, o le faila o le a faʻagasolo e tusa ai ma faʻasologa faʻaletonu: vaega - te, ata OS - Win XP ma Win 7, e aunoa ma le faia o se lipoti.
Fa'amatalaga i fanua autu ile talosaga ole tusitusiga:
faila_name и faila_ituaiga E mafai ona e tu'u avanoa pe le tu'uina atu, aua e le o se fa'amatalaga sili ona aoga pe a tu'uina atu se faila. I le tali API, o nei fanua o le a faʻatumu otometi e faʻatatau i le igoa o le faila na sii mai, ma o faʻamatalaga i totonu o le cache o le a tatau lava ona suʻeina e faʻaaoga ai le md5/sha1/sha256 hash amounts.
Fa'ata'ita'iga talosaga ma le faila_igoa ma le faila_type
{
"request": {
"file_name": "",
"file_type": "",
}
}vala - o se lisi o loʻo faʻaalia ai galuega talafeagai pe a faʻaogaina i totonu o le sandbox - av (Anti-Virus), te (Threat Emulation), faʻaaogaina (Faʻamataʻu Extraction). Afai e le pasia uma lenei parakalafa, ona faʻaaogaina lea o le vaega faʻaletonu - te (Threat Emulation).
Ina ia faʻatagaina le siakiina o vaega e tolu o loʻo avanoa, e tatau ona e faʻamaonia vaega nei ile talosaga API.
Fa'ata'ita'iga o se talosaga i le siakiina i totonu o le av, te ma le aveeseina
{ "request": [
{
"sha256": {{sha256}},
"features": ["av", "te", "extraction"]
}
]
}Ki i le vaega te
ata - o se lisi o loʻo i ai lomifefiloi ma le id ma le numera toe iloilo o faiga faʻaogaina o le a faia ai le siaki. ID ma numera toe iloilo e tutusa mo masini faʻapitonuʻu uma ma le ao.
Lisi o faiga fa'aoga ma toe teuteuga
Avanoa OS Ata ID
faʻatonutonuga
Ata OS ma Talosaga
e50e99f3-5963-4573-af9e-e3f4750b55e2
1
Microsoft Pupuni: XP - 32bit SP3
ofisa: 2003, 2007
Adobe Acrobat Reader: 9.0
Flash Player 9r115 ma Active X 10.0
Java Taimi Taimi: 1.6.0u22
7e6fe36e-889e-4c25-8704-56378f0830df
1
Microsoft Pupuni: 7 - 32 bit
ofisa: 2003, 2007
Adobe Acrobat Reader: 9.0
Flash Player: 10.2r152 (Sulu i totonu& Active X)
Java Taimi Taimi: 1.6.0u0
8d188031-1010-4466-828b-0cd13d4303ff
1
Microsoft Pupuni: 7 - 32 bit
ofisa: 2010
Adobe Acrobat Reader: 9.4
Flash Player: 11.0.1.152 (Sulu i totonu & Active X)
Java Taimi Taimi: 1.7.0u0
5e5de275-a103-4f67-b55b-47532918fa59
1
Microsoft Pupuni: 7 - 32 bit
ofisa: 2013
Adobe Acrobat Reader: 11.0
Flash Player: 15 (Sulu i totonu & Active X)
Java Taimi Taimi: 1.7.0u9
3ff3ddae-e7fd-4969-818c-d5f1a2be336d
1
Microsoft Pupuni: 7 - 64 bit
ofisa: 2013 (32bit)
Adobe Acrobat Reader: 11.0.01
Flash Player: 13 (Sulu i totonu & Active X)
Java Taimi Taimi: 1.7.0u9
6c453c9b-20f7-471a-956c-3198a868dc92
1
Microsoft Pupuni: 8.1 - 64 bit
ofisa: 2013 (64bit)
Adobe Acrobat Reader: 11.0.10
Flash Player: 18.0.0.160 (Sulu i totonu & Active X)
Java Taimi Taimi: 1.7.0u9
10b4a9c6-e414-425c-ae8b-fe4dd7b25244
1
Microsoft Pupuni: 10
ofisa: Professional Plus 2016 en-us
Adobe Acrobat Reader: DC 2015 MUI
Flash Player: 20 (Sulu i totonu & Active X)
Java Taimi Taimi: 1.7.0u9
Afai e leʻo faʻamaonia le ki o ata, ona faia lea o faʻataʻitaʻiga i ata fautuaina e le Check Point (le taimi nei Win XP ma Win 7). O nei ata e fautuaina e fa'avae i luga o iloiloga o le paleni sili o le fa'atinoga ma le fua o le pu'e.
lipoti - se lisi o lipoti matou te talosagaina pe a faʻaalia le faila e leaga. O lo'o maua avanoa nei:
-
aotelega - .tar.gz archive o lo'o iai se lipoti ile fa'ata'ita'iga a i tagata uma ata talosaga (o se itulau html ma vaega e pei o se vitio mai le emulator OS, o se faʻasalalauga fefaʻatauaʻiga, o se lipoti i le json, ma le faʻataʻitaʻiga lava ia i totonu o se faʻamaumauga puipuia-faifaʻailoga). O lo'o matou su'eina le ki i le tali- summary_report mo le la'uina mulimuli ane o le lipoti.
-
pdf - pepa e uiga i faʻataʻitaʻiga i totonu tasi ata, lea e masani ona maua e le toatele e ala i le Smart Console. O lo'o matou su'eina le ki i le tali- pdf_lipoti mo le la'uina mulimuli ane o le lipoti.
-
xml - pepa e uiga i faʻataʻitaʻiga i totonu tasi ata, faigofie mo le fa'avasegaina mulimuli ane o tapula'a i le lipoti. O lo'o matou su'eina le ki i le tali- xml_lipoti mo le la'uina mulimuli ane o le lipoti.
-
ta - .tar.gz archive o lo'o iai se lipoti ile fa'ata'ita'iga ile tasi ata talosaga (o se itulau html ma vaega e pei o se vitio mai le emulator OS, o se faʻasalalauga fefaʻatauaʻiga, o se lipoti i le json, ma le faʻataʻitaʻiga lava ia i totonu o se faʻamaumauga puipuia-faifaʻailoga). O lo'o matou su'eina le ki i le tali- lipoti_uma mo le la'uina mulimuli ane o le lipoti.
O le a le mea o lo'o i totonu o le lipoti o le aotelega
O ki full_report, pdf_report, xml_report o loʻo i totonu o le lomifefiloi mo OS taʻitasi
{
"response": [
{
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
},
"sha256": "9e6f07d03b37db0d3902bde4e239687a9e3d650e8c368188c7095750e24ad2d5",
"file_type": "html",
"file_name": "",
"features": [
"te"
],
"te": {
"trust": 10,
"images": [
{
"report": {
"verdict": "malicious",
"full_report": "8d18067e-b24d-4103-8469-0117cd25eea9",
"pdf_report": "05848b2a-4cfd-494d-b949-6cfe15d0dc0b",
"xml_report": "ecb17c9d-8607-4904-af49-0970722dd5c8"
},
"status": "found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
},
{
"report": {
"verdict": "malicious",
"full_report": "d7c27012-8e0c-4c7e-8472-46cc895d9185",
"pdf_report": "488e850c-7c96-4da9-9bc9-7195506afe03",
"xml_report": "e5a3a78d-c8f0-4044-84c2-39dc80ddaea2"
},
"status": "found",
"id": "6c453c9b-20f7-471a-956c-3198a868dc92",
"revision": 1
}
],
"score": -2147483648,
"combined_verdict": "malicious",
"severity": 4,
"confidence": 3,
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
}
}
}
]
}Ae o le summary_report key - o loʻo i ai le tasi mo faʻataʻitaʻiga lautele
{
"response": [
{
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
},
"sha256": "d57eadb7b2f91eea66ea77a9e098d049c4ecebd5a4c70fb984688df08d1fa833",
"file_type": "exe",
"file_name": "",
"features": [
"te"
],
"te": {
"trust": 10,
"images": [
{
"report": {
"verdict": "malicious",
"full_report": "c9a1767b-741e-49da-996f-7d632296cf9f",
"xml_report": "cc4dbea9-518c-4e59-b6a3-4ea463ca384b"
},
"status": "found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
},
{
"report": {
"verdict": "malicious",
"full_report": "ba520713-8c0b-4672-a12f-0b4a1575b913",
"xml_report": "87bdb8ca-dc44-449d-a9ab-2d95e7fe2503"
},
"status": "found",
"id": "6c453c9b-20f7-471a-956c-3198a868dc92",
"revision": 1
}
],
"score": -2147483648,
"combined_verdict": "malicious",
"severity": 4,
"confidence": 3,
"summary_report": "7e7db12d-5df6-4e14-85f3-2c1e29cd3e34",
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
}
}
}
]
}E mafai ona e talosagaina tar ma xml ma pdf lipoti i le taimi e tasi, e mafai ona e talosagaina le aotelega ma le tar ma le xml. O le a le mafai ona talosagaina se lipoti otooto ma se pdf i le taimi e tasi.
Ki i le vaega e fa'asili
Mo le fa'amata'u fa'amata'u, na'o le lua ki e fa'aaogaina:
faiga - pdf (faaliliu i le pdf, faʻaaogaina e le mafai) poʻo le mama (faʻamamaina mea faʻamalosi).
extracted_parts_codes - lisi o tulafono laiti mo le aveesea o anotusi malosi, e faʻatatau mo naʻo le auala mama
Laiti mo le aveeseina o mea mai faila
kote
faʻamatalaga
1025
Mea Feso'ota'i
1026
Macros ma Code
1034
Hyperlinks maaleale
1137
PDF GoToR Gaioiga
1139
PDF Launch Actions
1141
PDF URI Gaioiga
1142
PDF Sound Actions
1143
PDF Movie Actions
1150
PDF JavaScript Gaioiga
1151
PDF Auina Pepa Gaoioiga
1018
Fesili faʻamaumauga
1019
Mea Fa'apipi'i
1021
Vave Faasao Faamatalaga
1017
Meatotino masani
1036
Meatotino Faamauina
1037
Aotelega Meatotino
Ina ia sii mai se kopi mama, e tatau foi ona e faia se talosaga fesili (lea o le a talanoaina i lalo) pe a maeʻa ni nai sekone, faʻamaonia le aofaʻi o le hash o le faila ma le vaega faʻapipiʻi i le tusi talosaga. E mafai ona e pikiina le faila mama e faʻaaoga ai le id mai le tali i le fesili - extracted_file_download_id. Toe tasi, vaʻai i luma teisi, ou te tuʻuina atu faʻataʻitaʻiga o se talosaga ma se tali fesili e suʻe ai se id mo le siiina mai o se pepa faʻamaonia.
Talosaga fesili e su'e le extracted_file_download_id ki
{ "request": [
{
"sha256": "9a346005ee8c9adb489072eb8b5b61699652962c17596de9c326ca68247a8876",
"features": ["extraction"] ,
"extraction": {
"method": "pdf"
}
}
]
}Tali ile fesili (va'ai mo extracted_file_download_id key)
{
"response": [
{
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
},
"sha256": "9a346005ee8c9adb489072eb8b5b61699652962c17596de9c326ca68247a8876",
"file_type": "",
"file_name": "",
"features": [
"extraction"
],
"extraction": {
"method": "pdf",
"extract_result": "CP_EXTRACT_RESULT_SUCCESS",
"extracted_file_download_id": "b5f2b34e-3603-4627-9e0e-54665a531ab2",
"output_file_name": "kp-20-xls.cleaned.xls.pdf",
"time": "0.013",
"extract_content": "Macros and Code",
"extraction_data": {
"input_extension": "xls",
"input_real_extension": "xls",
"message": "OK",
"output_file_name": "kp-20-xls.cleaned.xls.pdf",
"protection_name": "Potential malicious content extracted",
"protection_type": "Conversion to PDF",
"protocol_version": "1.0",
"risk": 5.0,
"scrub_activity": "Active content was found - XLS file was converted to PDF",
"scrub_method": "Convert to PDF",
"scrub_result": 0.0,
"scrub_time": "0.013",
"scrubbed_content": "Macros and Code"
},
"tex_product": false,
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
}
}
}
]
}Faamatalaga lautele
I le tasi API valaau, e mafai ona e auina atu na o le tasi le faila mo le faʻamaonia.
O le vaega av e le manaʻomia se vaega faʻaopoopo ma ki, ua lava e faʻamaonia i totonu o le lomifefiloi vala.
Fesili API valaau
Metotia na fa'aaogaina − POST
tuatusi telefoni - https:///tecloud/api/v1/file/query
Aʻo leʻi tuʻuina atu se faila mo le download (faʻapipiʻi talosaga), e fautuaina e siaki le pusa o le sandbox (talosaga fesili) ina ia faʻamalieina le uta i luga o le API server, talu ai o le API server atonu ua uma ona i ai faʻamatalaga ma se faʻasalaga i luga o le faila na sii mai. O le valaau e na'o se vaega o tusitusiga. Ole vaega mana'omia ole talosaga ole sha1/sha256/md5 hash le aofa'i ole faila. I le ala, e mafai ona e mauaina i le tali i le talosaga upload.
La'iti e mana'omia mo fa'amatalaga
HTTP POST
https:///tecloud/api/v1/file/query
Ulutala:
Faatagaina:
tino
{
"talosaga": {
"sha256":
}
}
O se faʻataʻitaʻiga o se tali i se talosaga faʻapipiʻi, lea e iloa ai le aofaʻi o le sha1/md5/sha256.
{
"response": {
"status": {
"code": 1002,
"label": "UPLOAD_SUCCESS",
"message": "The file was uploaded successfully."
},
"sha1": "954b5a851993d49ef8b2412b44f213153bfbdb32",
"md5": "ac29b7c26e7dcf6c6fdb13ac0efe98ec",
"sha256": "313c0feb009356495b7f4a60e96737120beb30e1912c6d866218cee830aebd90",
"file_type": "",
"file_name": "kp-20-doc.doc",
"features": [
"te"
],
"te": {
"trust": 0,
"images": [
{
"report": {
"verdict": "unknown"
},
"status": "not_found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"score": -2147483648,
"status": {
"code": 1002,
"label": "UPLOAD_SUCCESS",
"message": "The file was uploaded successfully."
}
}
}
}Ole talosaga ole fesili, fa'aopoopo i le aofa'i o le hash, e tatau ona tutusa lelei ma le talosaga e tu'u i luga (pe o lo'o fuafua e fai), po'o le "ua uma" (o lo'o i ai nai vaega i le talosaga fesili nai lo le talosaga o le lafoina). I le tulaga o lo'o i ai i le talosaga fesili le tele o fa'ato'aga nai lo le talosaga mo le lafoina, e te le mauaina uma fa'amatalaga mana'omia i le tali.
Ole fa'ata'ita'iga lea ole tali ile fesili e le'i maua uma fa'amaumauga mana'omia
{
"response": [
{
"status": {
"code": 1006,
"label": "PARTIALLY_FOUND",
"message": "The request cannot be fully answered at this time."
},
"sha256": "313c0feb009356495b7f4a60e96737120beb30e1912c6d866218cee830aebd90",
"file_type": "doc",
"file_name": "",
"features": [
"te",
"extraction"
],
"te": {
"trust": 10,
"images": [
{
"report": {
"verdict": "malicious",
"pdf_report": "4e9cddaf-03a4-489f-aa03-3c18f8d57a52",
"xml_report": "9c18018f-c761-4dea-9372-6a12fcb15170"
},
"status": "found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"score": -2147483648,
"combined_verdict": "malicious",
"severity": 4,
"confidence": 1,
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
}
},
"extraction": {
"method": "pdf",
"tex_product": false,
"status": {
"code": 1004,
"label": "NOT_FOUND",
"message": "Could not find the requested file. Please upload it."
}
}
}
]
}Fa'alogo lelei i fanua kote и pepa. E fa'atolu ona fa'aalia nei fa'afanua i lomifefiloi tulaga. Muamua tatou te vaʻai i le ki o le lalolagi "code": 1006 ma le "label": "PARTIALLY_FOUND". O le isi, o nei ki e maua mo vaega taʻitasi taʻitasi na matou talosagaina - te ma le faʻaaogaina. Ma afai mo te e manino lava ua maua faʻamaumauga, o lona uiga mo le aveeseina e leai se faʻamatalaga.
O le uiga lea o le fesili mo le faʻataʻitaʻiga i luga
{ "request": [
{
"sha256": {{sha256}},
"features": ["te", "extraction"] ,
"te": {
"images": [
{
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"reports": [
"xml", "pdf"
]
}
}
]
}Afai e te auina atu se talosaga fesili e aunoa ma le vaega e aveese
{ "request": [
{
"sha256": {{sha256}},
"features": ["te"] ,
"te": {
"images": [
{
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"reports": [
"xml", "pdf"
]
}
}
]
}Ona maua lea e le tali o faamatalaga atoatoa (“code”: 1001, “label”: “FOUND”)
{
"response": [
{
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
},
"sha256": "313c0feb009356495b7f4a60e96737120beb30e1912c6d866218cee830aebd90",
"file_type": "doc",
"file_name": "",
"features": [
"te"
],
"te": {
"trust": 10,
"images": [
{
"report": {
"verdict": "malicious",
"pdf_report": "4e9cddaf-03a4-489f-aa03-3c18f8d57a52",
"xml_report": "9c18018f-c761-4dea-9372-6a12fcb15170"
},
"status": "found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"score": -2147483648,
"combined_verdict": "malicious",
"severity": 4,
"confidence": 1,
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
}
}
}
]
}Afai e leai se faʻamatalaga i totonu o le cache, o le tali o le "igoa": "NOT_FOUND"
{
"response": [
{
"status": {
"code": 1004,
"label": "NOT_FOUND",
"message": "Could not find the requested file. Please upload it."
},
"sha256": "313c0feb009356495b7f4a60e96737120beb30e1912c6d866218cee830aebd91",
"file_type": "",
"file_name": "",
"features": [
"te"
],
"te": {
"trust": 0,
"images": [
{
"report": {
"verdict": "unknown"
},
"status": "not_found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"score": -2147483648,
"status": {
"code": 1004,
"label": "NOT_FOUND",
"message": "Could not find the requested file. Please upload it."
}
}
}
]
}I se tasi API valaau, e mafai ona e auina atu ni numera o hash i le taimi e tasi mo le faʻamaonia. O le tali o le a toe faʻafoʻi faʻamatalaga i le faasologa tutusa e pei ona lafoina i le talosaga.
Fa'ata'ita'iga fa'ata'ita'iga talosaga fa'atasi ma le tele o aofa'i sha256
{ "request": [
{
"sha256": "b84531d3829bf6131655773a3863d6b16f6389b7f4036aef9b81c0cb60e7fd81"
},
{
"sha256": "b84531d3829bf6131655773a3863d6b16f6389b7f4036aef9b81c0cb60e7fd82"
}
]
}Tali ile fesili ile tele ole sha256 aofa'i
{
"response": [
{
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
},
"sha256": "b84531d3829bf6131655773a3863d6b16f6389b7f4036aef9b81c0cb60e7fd81",
"file_type": "dll",
"file_name": "",
"features": [
"te"
],
"te": {
"trust": 10,
"images": [
{
"report": {
"verdict": "malicious"
},
"status": "found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"score": -2147483648,
"combined_verdict": "malicious",
"severity": 4,
"confidence": 3,
"status": {
"code": 1001,
"label": "FOUND",
"message": "The request has been fully answered."
}
}
},
{
"status": {
"code": 1004,
"label": "NOT_FOUND",
"message": "Could not find the requested file. Please upload it."
},
"sha256": "b84531d3829bf6131655773a3863d6b16f6389b7f4036aef9b81c0cb60e7fd82",
"file_type": "",
"file_name": "",
"features": [
"te"
],
"te": {
"trust": 0,
"images": [
{
"report": {
"verdict": "unknown"
},
"status": "not_found",
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"score": -2147483648,
"status": {
"code": 1004,
"label": "NOT_FOUND",
"message": "Could not find the requested file. Please upload it."
}
}
}
]
}Talosagaina ni nai tupe i le taimi e tasi i se talosaga fesili o le a iai foi se aoga aoga i le faatinoga o le API server.
La'u mai le API valaau
Metotia na fa'aaogaina − POST (e tusa ai ma faʻamaumauga), MAUA e aoga foi (ma e foliga mai e sili atu ona talafeagai)
tuatusi telefoni - https:///tecloud/api/v1/file/download?id=
O le ulutala e manaʻomia le ki API e pasia, o le tino o le talosaga e gaogao, o le download id e pasia i le tuatusi URL.
I le tali atu i se talosaga fesili, afai e maeʻa le faʻataʻitaʻiga ma talosagaina lipoti pe a laʻuina le faila, o le id mo le laʻuina o lipoti o le a iloa. Afai e talosagaina se kopi mama, e tatau ona e suʻeina le id e sii mai ai le pepa faʻamamaina.
I le aotelega, o ki i le tali i le fesili o loʻo i ai le tau id mo le utaina e mafai ona:
-
summary_report
-
lipoti_uma
-
pdf_lipoti
-
xml_lipoti
-
extracted_file_download_id
Ioe, ina ia maua nei ki e tali atu ai i le talosaga fesili, e tatau ona faʻamaonia i le talosaga (mo lipoti) pe manatua foi e fai se talosaga e faʻaaoga ai le faʻaaogaina o galuega (mo pepa faʻamamaina)
Quota API valaau
Metotia na fa'aaogaina − POST
tuatusi telefoni - https:///tecloud/api/v1/file/quota
Ina ia siaki le quota o totoe i le ao, fa'aoga le quota query. O lo'o avanoa le tino talosaga.
Fa'ata'ita'iga tali i se talosaga mo se fa'asoa
{
"response": [
{
"remain_quota_hour": 1250,
"remain_quota_month": 10000000,
"assigned_quota_hour": 1250,
"assigned_quota_month": 10000000,
"hourly_quota_next_reset": "1599141600",
"monthly_quota_next_reset": "1601510400",
"quota_id": "TEST",
"cloud_monthly_quota_period_start": "1421712300",
"cloud_monthly_quota_usage_for_this_gw": 0,
"cloud_hourly_quota_usage_for_this_gw": 0,
"cloud_monthly_quota_usage_for_quota_id": 0,
"cloud_hourly_quota_usage_for_quota_id": 0,
"monthly_exceeded_quota": 0,
"hourly_exceeded_quota": 0,
"cloud_quota_max_allow_to_exceed_percentage": 1000,
"pod_time_gmt": "1599138715",
"quota_expiration": "0",
"action": "ALLOW"
}
]
}Fa'amata'u Puipuia API mo le Saogalemu Gateway
O lenei API na fausia a'o le'i faia le Threat Prevention API ma e fa'amoemoe mo na'o masini fa'apitonu'u. Mo le taimi nei e mafai ona aoga pe afai e te manaʻomia le Threat Extraction API. Mo le Fa'amata'u Fa'aa'oa'oga e sili atu le fa'aoga masani ole Fa'amata'u Puipuia API. Ia ki TP API mo SG ma fetuutuunai le ki API e te manaʻomia e mulimuli i laasaga mai . Ou te fautuaina le gauai atu i le laasaga 6b ma siaki le avanoa o le itulau https://<IPAddressofSecurityGateway>/UserCheck/TPAPI aua a o'o i se fa'ai'uga le lelei, e le talafeagai le fa'aopoopoina. O telefoni API uma o le a lafo i lenei url. Ole ituaiga vala'au (fa'apipi'i/fa'fesili) o lo'o fa'atulafonoina ile ki o le tino vala'au − talosaga_igoa. E mana'omia fo'i ki - api_key (e tatau ona e manatua i le taimi o le faagasologa o le faatulagaga) ma protocol_version (o lo'o iai nei le 1.1). E mafai ona e mauaina le pepa aloaia mo lenei API i . O mea lelei faʻapitoa e aofia ai le mafai ona lafo ni faila i le taimi e tasi mo faʻataʻitaʻiga pe a faʻapipiʻiina, talu ai o faila e lafoina o se manoa text base64. Ina ia faʻailoga / faʻavasega faila i / mai base64 e mafai ona e faʻaogaina se liliu mai luga ole laiga ile Postman mo faʻamoemoega faʻataʻitaʻiga, mo se faʻataʻitaʻiga - . Mo fa'amoemoega fa'atino, e tatau ona e fa'aogaina le fa'aogaina o le encode ma le decode metotia pe a tusia code.
Se'i o tatou va'ava'ai toto'a i galuega te и aveʻesega i lenei API.
Mo vaega te lomifefiloi ua saunia te_options i le upload/query requests, ma o ki i lenei talosaga e fetaui lelei ma le ki i totonu .
Faʻataʻitaʻiga talosaga mo faila faila i Win10 ma lipoti
{
"request": [{
"protocol_version": "1.1",
"api_key": "<api_key>",
"request_name": "UploadFile",
"file_enc_data": "<base64_encoded_file>",
"file_orig_name": "<filename>",
"te_options": {
"images": [
{
"id": "10b4a9c6-e414-425c-ae8b-fe4dd7b25244",
"revision": 1
}
],
"reports": ["summary", "xml"]
}
}
]
}Mo vaega aveʻesega lomifefiloi ua saunia scrub_options. O lenei talosaga o loʻo faʻamaoti mai ai le auala faʻamamā: liliu i le PDF, faʻamaonia mea faʻamalositino, pe filifili se faiga e tusa ai ma le faʻamatalaga Faʻamataʻu Faʻamataʻu (faʻaalia le igoa faʻamatalaga). O le mea sili e uiga i le tali atu i se talosaga API mo se faila o le mauaina lea o se kopi mama i le tali atu i lena talosaga o se manoa faʻapipiʻi base64 (e te le manaʻomia le faia o se talosaga fesili ma suʻe le id e sii mai ai le pepa)
Fa'ata'ita'iga o se talosaga e fa'amama se faila
{
"request": [{
"protocol_version": "1.1",
"api_key": "<API_KEY>",
"request_name": "UploadFile",
"file_enc_data": "<base64_encoded_file>",
"file_orig_name": "hi.txt",
"scrub_options": {
"scrub_method": 2
}
}]
}Tali i se talosaga
{
"response": [{
"protocol_version": "1.1",
"src_ip": "<IP_ADDRESS>",
"scrub": {
"file_enc_data": "<base64_encoded_converted_to_PDF_file>",
"input_real_extension": "js",
"message": "OK",
"orig_file_url": "",
"output_file_name": "hi.cleaned.pdf",
"protection_name": "Extract potentially malicious content",
"protection_type": "Conversion to PDF",
"real_extension": "txt",
"risk": 0,
"scrub_activity": "TXT file was converted to PDF",
"scrub_method": "Convert to PDF",
"scrub_result": 0,
"scrub_time": "0.011",
"scrubbed_content": ""
}
}]
} E ui i le mea moni o le itiiti ifo o talosaga API e manaʻomia e maua ai se kopi faʻamaonia, ou te iloa o lenei filifiliga e sili atu le lelei ma faigofie nai lo le faʻamatalaga-faʻamatalaga talosaga na faʻaaogaina i totonu. .
Aoina mai le Falemeli
Na ou faia ni fa'aputuga i le Postman mo le Fa'amata'u Puipui API ma le Fa'amata'u Puipuiga API mo Puipuiga Gateway, lea e fai ma sui o talosaga masani API. Ina ia mafai e le server ip / url API ma le ki e otometi ona sui i talosaga, ma le sha256 hash aofaʻi e manatua pe a uma ona sii mai le faila, e tolu fesuiaiga na faia i totonu o le aoina (e mafai ona e mauaina i latou e ala i le alu i le faʻatulagaina o le aoina. Fa'atonu -> Fesuia'iga): te_api (manaomia), api_key (e manaʻomia e faʻatumu i totonu, sei vagana ai le faʻaaogaina o le TP API ma masini faʻapitonuʻu), sha256 (tuu avanoa, e le faʻaaogaina i le TP API mo SG).
Faataitaiga Faʻaaoga
I totonu o nuu tusitusiga tusia i le Python o loʻo tuʻuina atu e siaki faila mai le lisi manaʻomia e ala i , ma . E ala i fegalegaleaiga ma le Threat Prevention API, o lou tomai e suʻesuʻe faila ua matua faʻalauteleina, talu ai o lea e mafai ona e suʻeina faila i le tele o faʻavae i le taimi e tasi (siaki i totonu , ona sosoo ai lea ma le Check Point sandbox), ma maua faila e le gata mai fefaʻatauaʻiga o fesoʻotaʻiga, ae ave foi mai soʻo se taʻavale fesoʻotaʻiga ma, mo se faʻataʻitaʻiga, faiga CRM.
puna: www.habr.com