Enabling the python-based analysis engine using the CLI

This procedure describes how to use CLI commands to re-enable the Python script-based analysis engine component of static analysis. The script-based analysis engine is enabled by default. You can disable and re-enable the script-based analysis engine by using CLI commands only. When the script-based analysis engine is enabled, no other configuration is required.

Prerequisites

Operator or Admin access.
Static analysis is enabled on the Intelligent Virtual Execution - Server appliance. Check the "Static Analysis enabled" field in the output of the show static‑analysis config command.

To enable static analysis based on YARA rules and other file type-specific analysis techniques:

Go to CLI configuration mode.

vx-hostname > enable
vx-hostname # configure terminal

Enable the Python-based tool.

vx-hostname (config) # static-analysis sa-python enable

Verify that static analysis is enabled and configured to use YARA rules and other file type analysis techniques.

vx-hostname (config) # show static-analysis config
 
Static Analysis enabled                : yes
  AV-suite enabled                     : yes
  AV-suite version                     : 6
  SA on AV-suite whitelist enabled     : no
  AV-check enabled                     : yes
  Dropper enabled                      : yes
 YARA enabled                         : yes
 
Embedded object extraction enabled     : no
Embedded URL extraction enabled        : yes
Max URLs from files to be analyzed     : 5
Static info policy                     : Disable

Yara Configuration
  Yara policy                          : both
  Yara customer match limit            : 5
  ........

Save your changes.
```
vx-hostname (config) # write memory
```