ACCE Self-Hosted Technical Requirements
Last Updated: December 09, 2024
- Docker 17.09.0+ (If run on Windows, Linux mode must be enabled)
- docker-compose 1.20.1+
- Python 3.9+ (for build scripts)
- IDA Pro 8.2.2
- Hex-Rays Decompiler for x86 and x64
- Ghidra Software Engineering Suite 10.2.3
- All CT provided code
- Open source libraries:
- -r
- Collectfast
- LnkParse3
- Markdown
- Pillow
- PyPDF2
- XLMMacroDeobfuscator
- anytree
- argon2-cffi
- asn1crypto
- beautifulsoup4
- bitarray
- capstone
- cashaddress
- celery
- certvalidator
- cffi
- click
- construct
- coreapi
- ctjava
- defusedxml
- distro
- django
- django-allauth
- django-allauth-2fa
- django-allauth[mfa]
- django-anymail[mailgun]
- django-bootstrap4
- django-celery-beat
- django-compressor
- django-cors-headers
- django-crispy-forms
- django-environ
- django-extensions
- django-filter
- django-hijack
- django-import-export
- django-markdownx
- django-model-utils
- django-organizations
- django-prometheus
- django-redis
- django-tables2
- django-termsandconditions
- djangorestframework
- djangorestframework-simplejwt
- docstring_parser
- dragodis
- drf-spectacular
- drf-yasg
- dwarffile
- esprima
- eventlet
- flask
- flask-log-request-id
- flower
- gevent
- glom
- golangfile
- gunicorn
- javaobj-py3
- jmespath
- jsbeautifier
- kordesii
- lief
- lxml
- msg_parser
- msoffcrypto-tool
- mutf8
- mwcp
- numpy
- olefile
- oletools
- oscrypto
- pefile
- protobuf
- psutil
- psycopg2
- py-pdf-parser
- py7zr
- pyarrow
- pyasn1
- pyasn1_modules
- pycdlib
- pycryptodome
- pyelftools
- pygments
- pyhidra
- pyparsing
- pypng
- pysha3
- pytest
- pytest-console-scripts
- python-dateutil
- python-docx
- python-slugify
- pytz
- pyxlsb2
- pyyaml
- pyzipper
- rarfile
- rcssmin
- redis
- regex
- requests
- rugosa
- sentry-sdk
- sentry-sdk[flask]
- setuptools_scm
- six
- sly
- tablib[all]
- tabulate
- vt-py
- werkzeug
- whitenoise
- xdis
- xlrd2
- yara-python
- yara-x
- yaramod
- zstandard
If the machine(s) running ACCE do not have an internet connection, an internet-connected machine must be used to build the individual Docker images (using the above requirements). Once the images have been built, they may be run on an air-gaped network. All other required software is downloaded and/or installed as part of the Docker image build process.
YARA signatures are designed to detect byte patterns within binary files for the purposes of marshalling ingested files to targeted code for the extraction of embedded components and/or configuration data. The YARA signatures are not designed for deployment to an organizations defensive products, as there is no guarantee against false-positive identifications for non-malicious content.