91 docs tagged with "spectra-analyze"

Overview of Spectra Analyze administration tasks, including users and personalization, configuration and updates, integrations and connectors, and usage and alerts.

Administration page in the new Spectra Analyze UI for managing system settings and configurations.

Spectra Analyze Advanced Search delivers metadata search with 100+ keywords, Boolean operators, and cross-cloud discovery for malware identification.

Search samples on Spectra Analyze and Spectra Intelligence using field queries, pagination, and sorting. POST /api/samples/v3/search/ endpoint reference.

Spectra Analyze Analysis services integrate dynamic and static analysis with ReversingLabs Cloud Sandbox, Cuckoo, Joe Sandbox, and third-party sandboxes.

API Key management page in the new Spectra Analyze UI for viewing your personal API key and quota allowances.

Spectra Analyze technical reference covering SNMP trap thresholds, MIB definitions, and configuration parameters for appliance monitoring and alerting.

Spectra Analyze Backup & Purge automates database backups and scheduled sample removal to manage appliance storage and enforce data retention policies.

Manage Root CA certificates in Spectra Analyze to control trusted certificate authorities and enable secure connections with integrated services.

Retrieve threat classification, risk score, and detection status for samples in Spectra Analyze, with optional Spectra Intelligence fallback for unknown samples.

System configuration settings and options for the Spectra Analyze appliance.

System configuration, redundancy, licensing, updates, backup and purge operations, and factory reset options for Spectra Analyze.

Spectra Analyze connectors configuration for external system integration with SIEM and orchestration platforms.

Retrieve top-level container files from which requested samples were extracted during Spectra Analyze static analysis, supporting bulk hash lookups.

Dashboard page in the new Spectra Analyze UI, showing submission statistics, processing metrics, and system health indicators.

Delete samples and analysis data from Spectra Analyze. DELETE /api/samples/{hash}/ removes files, metadata, and extracted children.

Spectra Analyze deprecated API endpoints including Advanced Search V2 and Classification V1, with migration guidance for current endpoint versions.

The Discussion page displays the comments that have been added to a sample, either by the user who uploaded it or by other users.

Download analyzed samples from Spectra Analyze to local storage. GET /api/samples/{hash}/download/ returns password-protected ZIP files.

Generate and download PDF or HTML reports for samples analyzed in ReversingLabs Cloud Sandbox via Spectra Analyze API.

The Sample Details page shows any dynamic analysis service reports, if dynamic analysis services are configured on the appliance.

Release quarantined email samples from Spectra Analyze. When the Email Quarantine feature is enabled, analysts can deliver .eml samples held by the Spectra Detect SMTP Connector to their original recipients.

A page that allows browsing through the entire hierarchy of files extracted from a sample.

List and download files extracted by Spectra Core from analyzed samples on Spectra Analyze.

Perform factory reset operations and Solr index reset for troubleshooting.

Features from the classic Spectra Analyze UI that are not yet available in the new UI.

Spectra Analyze File and URL Submissions enable manual and automated analysis with sandbox integration, extraction, and multi-service threat detection.

The file preview window can be used to preview image samples, text documents and some script languages. It also provides Entropy and Structure tabs, and a HEX preview.

Spectra Analyze Flexible Intel Feed configuration for STIX/TAXII threat intelligence integration with Spectra Intelligence.

Get complete analysis reports for samples on Spectra Analyze. POST /api/samples/v2/list/details/ returns static, dynamic, and cloud results.

Get started with Spectra Analyze: configure the Spectra Intelligence cloud connection, access the web interface, upload your first file for analysis, and interpret the results.

Spectra Analyze Graph visualizes relationships between malware samples, files, domains, and IPs for interactive threat exploration, node navigation, and connection analysis.

Spectra Analyze service integrations configuration for dynamic analysis sandboxes, threat feeds, and analysis enhancement.

Analysis service integrations, connectors, YARA repositories, and flexible intel feed configuration for Spectra Analyze.

IoC Submissions page in the new Spectra Analyze UI, displaying submission history, file analysis results, and search functionality.

Spectra Analyze Layouts Editor for customizing sample summary displays with data blocks, sharing, and personalization options.

Manage appliance licensing and license configuration.

Generate machine IDs, upload license files, and check license status on Spectra Analyze appliances using the Licensing API endpoints.

Query reputation data and threat analysis for URLs, domains, and IP addresses using Spectra Analyze Network Threat Intelligence API.

Spectra Analyze Network Threat Intelligence reveals URL, IP, and domain reputation with threat analysis, DOM inspection, and historical threat intelligence data.

Overview of the redesigned Spectra Analyze user interface, including how to enable it, key improvements, and differences from the classic UI.

Generate API tokens for Spectra Analyze REST API authentication. Covers token creation via Authentication API and Administration panel.

Spectra Analyze open source software licenses and third-party package attributions for compliance and transparency.

Create, check status, and download PDF analysis reports for samples on Spectra Analyze via three-step API workflow.

Check analysis status for submitted files on Spectra Analyze. POST /api/samples/status/ returns processed or not_found status for hash queries.

Spectra Analyze quota usage alerts configuration for email notifications on Spectra Intelligence usage and threshold monitoring.

Reanalyze existing samples on Spectra Analyze with Spectra Core, Spectra Intelligence, or dynamic analysis services using V1 endpoints.

Reanalyze multiple samples on Spectra Analyze with independently selectable services including Spectra Core, Cloud Sandbox, Cuckoo, Joe, and VMRay.

Configure and manage redundancy system settings for high availability.

Check whether a Spectra Analyze instance is the primary node in a redundant cluster using the cluster_primary endpoint.

Retrieve analysis report summaries for samples on Spectra Analyze. POST /api/samples/v2/list/ returns classification, risk, and metadata.

ReversingLabs Auxiliary Analysis static analysis service for Spectra Analyze, providing deeper inspection and enrichment for processed samples.

ReversingLabs Cloud Sandbox dynamic analysis integration for Spectra Analyze, including interactive analysis, analysis profiles, and artifact downloads.

Configure risk tolerance levels for users.

Sample Details page in the new Spectra Analyze UI, displaying comprehensive analysis results, classification information, and extracted metadata.

The Sample Details page presents all the available information about a sample.

The Report Summary page highlights the most interesting information about an analyzed sample.

Spectra Analyze Search & Submissions provides local and cloud file queries, bulk operations, filtered results, and network resource analysis tools.

Spectra Analyze self-service registration setup with identity providers like Okta using SAML and OIDC integration.

Override sample classifications on Spectra Analyze or Spectra Intelligence. POST /api/samples/{hash}/setclassification/ for local or cloud overrides.

Spectra Analyze initial setup and configuration guide covering system requirements, deployment, licensing, and first-time appliance configuration.

The Sources page displays different types of sources for the selected sample, their time and date of retrieval, as well as any additional information.

Malware analysis appliance combining Spectra Core static decomposition with Spectra Intelligence threat data. Identify 4000+ file formats, unpack 400+, collaborate on investigations.

Set up Spectra Analyze alert subscriptions to receive real-time email or in-app notifications when malware classification or analysis results change.

Integrate Spectra Analyze with automated workflows using REST APIs. Covers authentication tokens, file submissions, search, reports, and YARA management.

View Spectra Analyze submission statistics, malware classification trends, YARA match counts, and threat analytics across configurable time ranges. Export as PDF.

Use Spectra Analyze system and user tags to categorize malware samples, then search by tag and tag-user keywords in Advanced Search for filtered results.

Resolve common Spectra Analyze issues: file upload failures, HTTP 413 errors, classification problems, license warnings, disk space alerts, and API error codes.

Configure Model Context Protocol (MCP) server integration with Claude, Windsurf, and other AI assistants for Spectra Analyze API access, malware reporting, IOC triage, and threat intelligence lookups.

Spectra Analyze Spectra Core results display static analysis reports with file information, behavior indicators, and risk assessment organized by section.

Retrieve Spectra Core static analysis reports for samples on Spectra Analyze. GET /api/v2/samples/{hash}/ticore/ endpoint with field selection.

Submit files and URLs to Spectra Analyze via REST API. POST /api/submit/file/ and /api/submit/url/ endpoints with tags, metadata, and analysis options.

Spectra Analyze System Status monitoring for appliance health, service status, resource utilization, and system log retrieval.

Manage system updates and software upgrades for the appliance.

Add, remove, and list user tags for samples on Spectra Analyze. GET/POST/DELETE /api/samples/{hash}/usertags/ for custom sample organization.

Third-party dynamic analysis integrations for Spectra Analyze, including CAPE, Cisco, Cuckoo, FireEye, Joe Sandbox, and VMRay.

Threats can be classified by Spectra Core, Spectra Intelligence, dynamic analysis, or manually overridden. This page also contains a list of all possible classification reasons for a sample.

Spectra Analyze Threat Intelligence displays Spectra Intelligence cloud data including AV detections, threat history, and malware reputation over time.

Set and query system timezone on Spectra Analyze appliances to control date and time display preferences via API.

Spectra Analyze authentication token management for API access control and per-user key configuration and administration.

System status monitoring, quota usage alerts, and appliance health management for Spectra Analyze.

Spectra Analyze role-based access control for creating, editing, and managing custom user roles and permission assignments.

Spectra Analyze user management for creating accounts, configuring access, and managing user directory and authentication settings.

User management, roles, authentication tokens, and layout customization options for Spectra Analyze.

Manage YARA rulesets on Spectra Analyze: list, create, update, and delete rulesets. GET/POST/DELETE /api/yara/v2/rulesets/ endpoints.

YARA Hunt page in the new Spectra Analyze UI for managing YARA rulesets and hunting for threats.

Spectra Analyze YARA Hunting enables custom ruleset creation, cloud synchronization, and malware detection with continuous and retroactive scanning.

Spectra Analyze YARA repositories management for rule synchronization, online sources, and custom GitHub configuration.

Manage YARA repositories on Spectra Analyze: create, update, delete repositories, schedule sync jobs, and publish rulesets via API.

Start, stop, and monitor YARA retroactive hunts on Spectra Analyze for local and cloud retro scans via API endpoints.

Spectra Analyze YARA Retroactive Hunting scans historical samples and cloud data for rule matches, uncovering previously hidden malware detections.