Follow these steps to enable or disable the Python-based tool to perform static analysis on malware samples based on YARA rules and based on other file type analysis techniques.
To enable the Python-based tool:
Enable the CLI configuration mode.
hostname > enable hostname # configure terminal
Enable the Python-based tool to perform static analysis on the appliance.
hostname (config) # static-analysis sa-python enableVerify that the Python-based tool can perform static analysis based on YARA rules and based on other file type analysis techniques on the appliance.
hostname (config) # show static-analysis configStatic Analysis enabled : yes AV-suite enabled : yes SA on AV-suite whitelist enabled : no AV-check enabled : yes Dropper enabled : yes YARA enabled : yes .....
To disable the Python-based tool:
Enable the CLI configuration mode.
hostname > enable hostname # configure terminal
Disable the Python-based tool.
hostname (config) # no static-analysis sa-python enableVerify that the Python-based tool is disabled.
hostname (config) # show static-analysis configStatic Analysis enabled : yes AV-suite enabled : yes SA on AV-suite whitelist enabled : no AV-check enabled : yes Dropper enabled : yes YARA enabled : no .....