Questions tagged [sophoslabs-intelix]
Questions etc. relating to Sophos InteliX, an API available via AWS to access SophosLabs threat intelligence data. Documentation is available at https://api.labs.sophos.com/doc/index.html
24
questions
0
votes
1
answer
41
views
Integrate Sophos Firewall with Azure AD (openssl)
please help me on this error
Did as in the bellow link,
[https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/125872/sophos-firewall-integrate-sophos-firewall-with-azure-ad#...
0
votes
0
answers
30
views
SophosLabs Intelix - 16MB restriction
According to the documentation and experiment with actual code, it is found that file larger than 16MB cannot be scanned by SophosLabs Intelix. Reference: https://api.labs.sophos.com/doc/changelog....
1
vote
1
answer
46
views
SophosLabs Intelix - Scanning speed is slow
Small PDF files are (under 200KB) are being used to test the performance of the SophosLabs Intelix.
The official example code has been used:
https://github.com/sophoslabs/intelix-lambda-example/blob/...
0
votes
0
answers
67
views
Sophos Intelix Dynamic Analysis - job disappears (404) before it returns a report
I'm experiencing an issue using Sophos Labs Intelix Dynamic file analysis: https://api.labs.sophos.com/doc/analysis/file/dynamic.html
For some files submitted, the API returns 202 for several minutes, ...
0
votes
0
answers
48
views
File is too large to scan - what are the alternative options?
If a file is over 16MB it cannot be scanned by static or dynamic file analysis in Sophos Intelix. Is there a suggested fallback option for scanning/threat-detection in larger files?
1
vote
1
answer
124
views
Interpreting sophos static file analysis score
Is there an explanation anywhere for what the score field from the sophos static/dynamic file analysis report means?
The schema simply states: Maliciousness score of the analyzed file (0 = malicious, ...
0
votes
1
answer
971
views
How to calculate SHA-256 checksum of S3 file content in memory
I'm looking to compute the sha256 checksum of an image file located in S3 without writing it to disk.
I have tried the code below:
const data = (
await getS3().getObject({ Bucket: bucketName, ...
0
votes
1
answer
50
views
SophosLabs Intelix Roadmap
Since there was no update on SophosLabs Intelix in git hub since Dec 2020, I like to check if there is a roadmap on the APIs.
Will it continue or there are some major changes?
Thx
Checked with ...
0
votes
0
answers
60
views
Pointing SquidGuard Squid proxy for realtime url reputation or category check
I am trying to use Sophos Intelix for url category checking or for filtering through squid proxy. Also caching a result locally on the proxy (for a specific duration) until url is checked again.
I am ...
1
vote
1
answer
70
views
Cannot instal Sophos Endpoint Security and Control because existing 3rd party AV software could not be uninstalled
I have a Windows 10 laptop which was happily running Sophos ECC for several years but recently stopped updating. I was advised by Sophos tech support to uninstall and reinstall. But reinstall stops ...
2
votes
1
answer
116
views
Sophos Intellix Authenticate API Error trying to Authenticate
I am trying to authenticate to the sophos intellix authenticate api:
curl --location --request POST 'https://api.labs.sophos.com/oauth2/token'
--header 'Content-Type: application/json;charset=UTF-8'...
0
votes
1
answer
84
views
Is there a .Net Client library for the SophosLabs Intelix API?
I can't seem to locate any nuget packages for it.
I'm feeling a little obtuse, but I am finding myself iterating over every status code for the calls to each endpoint, mapping out the returned objects....
3
votes
1
answer
567
views
Scan Uploaded File using Sophos Labs Intelix in c#
I am new to SophosLabs Intelix. I am trying to build a sample in my ASP .Net Application(webforms/MVC) in which I want to run an Antivirus Scan on the uploaded file by the User. If the Uploaded file ...
2
votes
1
answer
114
views
How long does Static / Dynamic analysis take in Intelix?
I am currently testing the Intelix API within my service.
Please could you tell me the average time a static and dynamic analysis will take?
Thank you in advance
0
votes
2
answers
95
views
open HTML-Report in a browser
how can a open the sophos-report in a new browser tab? I upload a file to static file analysis with nodejs.
I have a access token the jobId and the url. But when I open the url for the html-report I ...
-3
votes
1
answer
176
views
Sophos Intelix Static file analysis - html
What about code of Submit a file for static analysis - HTML create on Insomnia?
https://api.labs.sophos.com/doc/analysis/file/static.html
describe only 3!
0
votes
1
answer
75
views
How to check a non verified URI status in the SophosLabs Intelix URL Lookup API?
I've submitted a phishing url to URL LOOKUP API and got this response (with some characters replaced with 'X'):
{"requestId": "8d07XXXXX-b0X5-X4gX-3XaX-XXXXXX677acXX,XXXXXXXXX76", "ttl": 300}
...
2
votes
1
answer
67
views
How should I specify a URI in the SophosLabs Intelix Malware and Productivity URL Lookup API?
I'm trying to use the Malware and Productivity URL Lookup API to perform a lookup for a URI. The documentation suggests the form should be:
[ scheme ":" "//" ] [ userinfo "@" ] host [ ":" port ] ...
4
votes
1
answer
138
views
Uploading big samples for analysis giving unexpected response
While doing the 'POST' request to 'https://de.api.labs.sophos.com/analysis/file/static/v1', I am getting 'HTTP content length exceeded 10485760 bytes.' response.
I know there is a limit to file size ...
1
vote
2
answers
120
views
Unable to submit for static analysis
We are not able to submit file for static analysis
Tried with the request as below :
curl -X POST "https://de.api.labs.sophos.com/analysis/file/static/v1/"
-H "Authorization: <token>"
-H "...
3
votes
2
answers
3k
views
POST file (as binary stream) using java.net.HttpURLConnection as a param file=<file binary stream>
I am trying to upload (POST) a file to an endpoint using java.net.HttpURLConnection but I keep getting http code 400 (bad request).
I refered to Send File And Parameters To Server With ...
3
votes
1
answer
188
views
Restrictions of Intellix APIs
The below documentation given for Sophos Intellix APIs does not mention the restrictions on file size or a number of submissions that can be made in a given time, are there any such restrictions in ...
3
votes
1
answer
151
views
What do reputationScore values mean in SophosLabs File Malware Cloud Lookup API
The File Malware Cloud Lookup API returns 'reputationScore' in response. The doc page has various values of reputation score in examples, but it doesn't say what those values mean. How we can make use ...
1
vote
1
answer
144
views
What would happen if I send the same correlation id for multiple lookup requests to SophosLabs lookup?
In the documentation for SophosLabs File Malware Cloud Lookup API (https://api.labs.sophos.com/doc/lookup/files.html), a correlationId is mentioned. How should this be generated? Should be unique for ...