tobias
e62a14dafc
Generate interlinked wiki from master inventory: 397 tool pages, 15 workflow pages, 27 recipe pages, 33 category pages, plus index. All pages use [[wiki-links]] for cross-navigation between tools, workflows, recipes, and categories (1782 links total). Install zk for interactive browsing with fzf search, tag filtering, and backlink discovery. Add 'fhelp wiki' command and Makefile target. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
18 lines
502 B
Markdown
18 lines
502 B
Markdown
# Emulate Malware and Extract API Calls
|
|
> Emulate a Windows binary on Linux and analyze its API usage
|
|
|
|
**Tools:** [[tools/speakeasy|speakeasy]], [[tools/jq|jq]]
|
|
**FOR610 Lab:** 1.4
|
|
|
|
## Commands
|
|
```bash
|
|
# Emulate and capture both JSON report and text log
|
|
speakeasy -t <sample> -o report.json 2> report.txt
|
|
# Extract all API names called
|
|
jq '.entry_points[].apis[].api_name' report.json
|
|
# Extract unique API names
|
|
jq -r '.entry_points[].apis[].api_name' report.json | sort -u
|
|
```
|
|
|
|
#recipe #speakeasy #jq
|