keithmccammon

#!/usr/bin/env python

import argparse
import sys

from cbapi.response import CbEnterpriseResponseAPI
from cbapi.response.models import Process, Sensor
from cbapi.response.live_response_api import LiveResponseSession

keithmccammon

#!/usr/bin/env python

"""
Given a sensor ID and a file path, delete the file. This performs no logging
and returns no status. It is generally unhelpful and not a template upon which
you want to build. But if the file is present and not locked it will be
destroyed :)
"""

import argparse

keithmccammon

#!/usr/bin/env python

import gzip
import base64
import StringIO
import sys


def gunzip(raw_data):
    decoded_data_obj = StringIO.StringIO(raw_data)

keithmccammon

Keybase proof

I hereby claim:

• I am keithmccammon on github.
• I am kwm (https://keybase.io/kwm) on keybase.
• I have a public key whose fingerprint is 142F DB63 ACB2 E176 484B 184E 0ACD C417 A011 DD72

To claim this, I am signing this object:

keithmccammon

"""Dump a comma-separated list of domain,ipaddr pairings where the domain
includes at least one element from the list (domains).

Useful for dumping historical name resolution data, compiling lists of
endpoints that have talked to a domain, etc.

Depends on https://github.com/redcanaryco/cbapi2.

"""