From CSRRT-LU

Table of contents

1 Introduction 2 Features 3 Architecture 3.1 Interaction 4 Anne web interface 4.1 Screenshots 4.1.1 Anne web interface - main 4.1.2 Anne web interface - track your analysis 4.1.3 Anne web interface - query your report 4.1.4 Anne admin web interface - incomming queue 4.1.5 Anne admin web interface - logs

Introduction

A first anne release is announced.

Features

• XMLRPC interface for enqueuing, tracing, and querying reports of a foreign binary
• process foreign binary jobs (first come first served)
• define your analysis your self by inheriting from the AnneLang class
• logging feature
• persistant procesing capabilities, when the application crashes start it again and it continues its work
• central configuration file
• capabilities to add new plugins even third parties software
• web interface for uploading malware
• webinterface for tracing malware (information about your analysis state)
• webinterface for querying your report
• administration webinterface ( you can see the queues, clean them, see the logs )

Architecture

In your background of your machine are running three processes

* one XMLRPC server 
* anne core that process your analysis tasks
* webserver for hosting anne webinterface

Interaction

At first anne core must be started, next the XMLRPC server is started. You can analyse your malware via XMLRPC or you simply use anne web interface where you can upload binary or query for reports.

Anne web interface

Screenshots

Anne web interface - main

Anne web interface - track your analysis

Anne web interface - query your report

Anne admin web interface - incomming queue

Anne admin web interface - logs