Instead of having special .lnk parsing in our Office analyzer it's much
easier to separate this logic using Yara rules & Extractor plugins. This
way we support other file formats such as, apparently, PE files, too.
Using cluster-test.py one may test each and every VM in a Distributed
Cuckoo cluster against specific script(s). Currently only one script is
featured, namely one that checks the internet connectivity in the VM.
Also adds a small feature to return a correct status when a task has
already been deleted and updates the documentation for some operations.
Following a summary of the changes in this commit:
* Moved data/android/ to stuff/android/ as I'm not sure what else to do
with it for now.
* Moved data/src/binpackage/ to stuff/execsc/ as it contains the source
code for the execsc.exe binary that we feature in our repository.
* Moved data/strace.stp to stuff/strace.stp as it's required for
STAP-based analysis of Linux binaries.
* Removed data/test-internet.vbs as it's much easier to do this logic
in Python and we have existing scripts for this in our unit tests.
* Moved utils/darwin/ to stuff/darwin/ as I'm not sure what else to do
with it right now.
* Moved utils/rawdb.py to stuff/ as it may still be useful.
* Removed utils/service.sh as we've superseded the Upstart scripts by
a supervisor-based configuration file.
* Removed utils/setup.py as we've superseded the entire setup process
with a SaltStack-based module.
* Removed utils/smtp_sinkhole.py as this should be done in Postfix.
* Removed utils/{start,stop}-distributed.sh as this functionality has
been replaced by a single worker in combination with supervisor.
* Removed utils/stats.py as you can also get this information from the
Cuckoo API and/or Cuckoo Web Interface.
* Moved utils/suricata.sh to stuff/.
* Moved utils/vpncheck.py to stuff/.
ihatecsv