官术网_书友最值得收藏!

Running the application

With the addition of feature extraction in our pipeline, we first need to perform feature extraction on the files:

  1. Assuming the folder of files called temp_data exists, execute the following command:
PS chapter03-logistic-regression\bin\Debug\netcoreapp3.0> .\chapter03-logistic-regression.exe extract temp_data                                                
Extracted 8 to sampledata.csv

The output shows the count of extracted files and the output sample file.

  1. To train the model using either the included sampledata.csv or one you trained yourself, execute the following command:
PS chapter03-logistic-regression\bin\Debug\netcoreapp3.0> .\chapter03-logistic-regression.exe train ..\..\..\Data\sampledata.csv

The chapter3.mdl model file should exist in the folder executed in once complete.

  1. To run the newly trained model against an existing file such as the compiled chapter3 executable, run the following command:
PS chapter03-logistic-regression\bin\Debug\netcoreapp3.0> .\chapter03-logistic-regression.exe predict .\chapter03-logistic-regression.exe                      
Based on the file (.\chapter03-logistic-regression.exe) the file is classified as benign at a confidence level of 8%
If you are looking for sample files, the c:\Windows and c:\Windows\System32 folders contain numerous Windows Executables and DLLs. In addition, if you are looking to create malicious-looking files that are actually clean, you can create files on the fly on http://cwg.io in various file formats. This is a helpful tool in the cyber-security space where testing new functionality on a development machine is much safer than detonating real zero-day threats on!
主站蜘蛛池模板: 瑞丽市| 峨眉山市| 文化| 三穗县| 马公市| 邯郸市| 手游| 鲜城| 延安市| 苍溪县| 宁阳县| 抚远县| 海原县| 重庆市| 巴林右旗| 丰原市| 新郑市| 苏尼特左旗| 鄂托克旗| 兴文县| 苗栗市| 安图县| 玉溪市| 玉屏| 公安县| 额济纳旗| 巢湖市| 岱山县| 禄丰县| 宁城县| 禹州市| 察雅县| 盐山县| 台安县| 肥西县| 许昌县| 屯昌县| 平南县| 隆尧县| 霍山县| 伊金霍洛旗|