Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Complete overhaul of README and integration into Wiki #61

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

askkemp
Copy link

@askkemp askkemp commented Feb 1, 2017

Using a minimal install of CentOS 7.3, I updated the installation instructions in the Readme for the CentOS section.

Using a minimal install of CentOS 7.3, I updated the installation instructions in the Readme for the CentOS section.
@marnao
Copy link
Contributor

marnao commented Feb 3, 2017

@langhorne thanks for this!

Before I merge, have you tried using pip to install pefile?

@askkemp
Copy link
Author

askkemp commented Feb 3, 2017

@marnao I went back and tested the manually installed pefile module (pefile-2016.3.28-py2.7). I tested it against PuTTY.exe Found out that META_PE had an exception.

I then removed it pip uninstall pefile==2016.3.28 (which seems to have worked) and then pip installed it which gave me pefile-2016.3.28-py2.7. A rescan of the EXE had NO errors.

So it appears that pip install pefile is the best option.

@marnao
Copy link
Contributor

marnao commented Feb 3, 2017

nice! can you update the instructions to reflect that please?

pip install pefile instead of manually installing it.
@askkemp
Copy link
Author

askkemp commented Feb 10, 2017

I used the web gui so I think I made the change correctly.

@marnao
Copy link
Contributor

marnao commented Mar 17, 2017

It looks like you added this to yum install instead of pip install

@askkemp
Copy link
Author

askkemp commented Apr 22, 2017

I'm redoing it all again and I don't think the below are needed:

yum install autoconf automake libtool swig

Thoughts?

Here is what I have now:

Installing on CentOS

Based on installation from a CentOS 7.3 minimun installation

  1. Install framework dependencies:

    sudo yum install -y epel-release
    sudo yum install -y python-pip python-zmq python-devel gcc
    sudo pip install gevent interruptingcow yara-python 

If you want to use the Suricata integration prototype, then also 'pip install redis'

  1. Install Laika BOSS scanning module dependencies

    sudo yum install openssl-devel ssdeep-devel libffi-devel
    sudo pip install cffi six IPy fluent-logger javatools m2crypto olefile pylzma pyclamd py-unrar2 pexpect pefile ssdeep
  2. Install pyexif

pyexif is a Python library to communicate with the ExifTool command-line application. Install ExifTool application following instructions at http://www.sno.phy.queensu.ca/~phil/exiftool/install.html#Unix.

```shell
Install Exiftool application (see above sentence)
sudo yum install perl-devel
wget https://github.com/smarnach/pyexiftool/archive/master.zip
unzip master.zip
sudo python setup.py build
sudo python setup.py install
```

You may need to set the LD_LIBRARY_PATH variable to include /usr/local/lib when running Laika.

Overhauled and connected to wiki
@askkemp
Copy link
Author

askkemp commented Jul 28, 2017

I overhauled the README and connected parts to the wiki.

@askkemp askkemp changed the title Readme - CentOS Install Instructions Update Complete overhaul of README Jul 29, 2017
@askkemp askkemp changed the title Complete overhaul of README Complete overhaul of README and integration into Wiki Jul 29, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants