File tree Expand file tree Collapse file tree 1 file changed +22
-0
lines changed
Expand file tree Collapse file tree 1 file changed +22
-0
lines changed Original file line number Diff line number Diff line change @@ -49,6 +49,28 @@ For example:
4949
5050// FIXME
5151
52+ === Customization
53+
54+ You can modify (add, modify or delete) registry keys, directories and files like this:
55+
56+ Registry keys:
57+
58+ ./malboxes.py registry profile modtype key name value valuetype
59+
60+ Ex: ./malboxes registry win10_64_analyst add HKCU:\Software Malboxes IsAwesome String
61+
62+ Directories and files:
63+
64+ ./malboxes.py directory profile modtype dirpath
65+
66+ Ex: ./malboxes.py directory BadAPT57 delete C:\Windows\System32
67+
68+ You can add packages to install that are specific to the profile:
69+
70+ ./malboxes.py package profile package
71+
72+ Ex: ./malboxes.py package RansomwareThatINeedRevengeOn chrome
73+
5274== Credits
5375
5476After I had the idea for an improved malware analyst workflow based on what
You can’t perform that action at this time.
0 commit comments