JDeepviz

JDeepviz is a Java wrapper for deepviz.com REST APIs

Install

Download the latest release of the precompiled JAR binary from https://github.com/saferbytes/JDeepviz/releases or you can also recompile from sources as well. Make sure you always download the latest release's sources.

The complete Deepviz REST APIs documentation can be found at https://api.deepviz.com/docs/

Usage

To use Deepviz API sdk you will need an API key you can get by subscribing the service free at https://account.deepviz.com/register/

Sandbox SDK API

To upload a sample:

import com.deepviz.sandbox.Sandbox;
import com.deepviz.Result;

Sandbox sbx = new Sandbox();
Result result = sbx.uploadSample("my-api-key","path\\to\\file.exe")
System.out.println(result);

To upload a folder:

import com.deepviz.sandbox.Sandbox;

Sandbox sbx = new Sandbox();
sbx.uploadFolder("my-api-key","path\\to\\file.exe")

To download a sample:

import com.deepviz.sandbox.Sandbox;
import com.deepviz.Result;

Sandbox sbx = new Sandbox();
Result result = sbx.downloadSample("my-api-key", "md5-to-download", "dest-path")
System.out.println(result);

Send bulk request and retrieve the archive

List<String> md5_list = new ArrayList<String>();
md5_list.add("a6ca3b8c79e1b7e2a6ef046b0702aeb2");
md5_list.add("34781d4f8654f9547cc205061221aea5");
md5_list.add("a8c5c0d39753c97e1ffdfc6b17423dd6");
Sandbox sbx = new Sandbox();
result = sbx.bulkDownloadRequest("my-api-key", md5_list);
System.out.println(result);

JsonNode message_json = new JsonNode(result.getMsg());
do {
    result = sbx.bulkDownloadRetrieve("my-api-key", String.valueOf(message_json.getObject().get("id_request")), ".");
    try {
        Thread.sleep(1000);
    } catch (InterruptedException e) {
        e.printStackTrace();
    }
} while (result.getStatus() == DeepvizResultStatus.DEEPVIZ_STATUS_PROCESSING);
System.out.println(result);

To retrieve full scan report for a specific MD5

import java.util.ArrayList;
import java.util.List;

import com.deepviz.sandbox.Sandbox;
import com.deepviz.Result;

Sandbox sbx = new Sandbox();
Result result = sbx.sampleReport("my-api-key", "MD5-hash");
System.out.print(result.getMsg());

Threat Intelligence SDK API

To retrieve scan result of a specific MD5

import com.deepviz.intel.Intel;
import com.deepviz.Result;

Intel intel = new Intel();

Result result = intel.sampleResult("my-api-key", "MD5-hash");
System.out.print(result.getMsg());

To retrieve only specific parts of the report of a specific MD5 scan

import com.deepviz.intel.Intel;
import com.deepviz.Result;

import java.util.ArrayList;
import java.util.List;

Intel intel = new Intel();

List<String> filters = new ArrayList<String>();
filters.add("classification");
filters.add("rules");
Result result = intel.sampleInfo("my-api-key", "MD5-hash", filters);

System.out.println(result.getMsg());

To retrieve intel data about an IP:

import com.deepviz.intel.Intel;
import com.deepviz.Result;

import java.util.ArrayList;
import java.util.List;

Intel intel = new Intel();

result = intel.ipInfo("my-api-key", "8.8.8.8", null);
System.out.println(result);

To retrieve intel data about an IP with output filters:

import com.deepviz.intel.Intel;
import com.deepviz.Result;

Intel intel = new Intel();

List<String> filters = new ArrayList<String>();
filters.add("generic_info");

result = intel.ipInfo("my-api-key", "8.8.8.8", filters);
System.out.println(result);

To retrieve intel data about a domain:

import com.deepviz.intel.Intel;
import com.deepviz.Result;

import java.util.ArrayList;
import java.util.List;

Intel intel = new Intel();

Result result = intel.domainInfo("my-api-key", "google.com", null);
System.out.println(result);

To retrieve intel data about a domain with output filters:

import com.deepviz.intel.Intel;
import com.deepviz.Result;

Intel intel = new Intel();

List<String> filters = new ArrayList<String>();
filters.add("generic_info");

Result result = intel.domainInfo("my-api-key", "google.com", filters);
System.out.println(result);

To run generic search based on strings (find all IPs, domains, samples related to the searched keyword):

import com.deepviz.Result;
import com.deepviz.intel.Intel;

Intel intel = new Intel();
Result result = intel.search("my-api-key", "test");
//Result result = intel.search("my-api-key", "test", 0, 2);
System.out.println(result);

To run advanced search based on parameters (find all MD5 samples connecting to a domain and determined as malicious):

import com.deepviz.intel.input.AdvancedSearchInput;
import com.deepviz.intel.Intel;
import com.deepviz.Result;

import java.util.ArrayList;
import java.util.List;

List<String> domains = new ArrayList<String>();
domains.add("justfacebook.net");

AdvancedSearchInput input = new AdvancedSearchInput();
input.setDomain(domains);
input.setClassification("M");

Intel intel = new Intel();
Result result = intel.advancedSearch("my-api-key", input);
System.out.println(result);