Skip to content

Releases: seifreed/triage-sandbox

Release list

triage-sandbox v1.0.0

triage-sandbox v1.0.0 Latest
Latest

Choose a tag to compare

View all tags
@seifreed seifreed released this 17 Aug 08:05
v1.0.0
8db2c6a

triage-sandbox is a typed Python library and CLI for the Triage (tria.ge) malware analysis sandbox. This is the first public release.

Features

  • Full tria.ge API coverage — submissions (file / URL / remote fetch), listing & search, real-time events, reports (overview, static, dynamic task, kernel monitor), downloads (original sample, artifact archive, pcap, single task files), analysis profiles and API keys.
  • Typed models — samples, tasks and analysis profiles come back as typed objects, never raw dicts.
  • Public + Private Triage — works against api.tria.ge and Private Triage (private.tria.ge); status can verify one or both deployments at once.
  • CLI + library — use it from the shell or as a Python package.
  • Streaming events — real-time NDJSON event streams for a single sample or every sample.
  • Large uploads — big-file submissions stream without a fixed read/write timeout cap.
  • Clean architecture — layered domain / infrastructure / CLI, enforced by executable tests.
  • Cross-platform — Windows, Linux and macOS on x64 and ARM, Python 3.14+.

Install

pip install triage-sandbox-cli

Quick start

export TRIAGE_INSTANCE=public
export TRIAGE_PUBLIC_TOKEN=YOUR_TOKEN
export TRIAGE_PUBLIC_API_URL=https://api.tria.ge

triage-sandbox status
triage-sandbox submit file malware.exe --tag incident-42
triage-sandbox search "family:agenttesla" --limit 5

Quality

  • 100% test coverage, no mocks (tests run against a real in-process HTTP server).
  • black, ruff, mypy, bandit and pip-audit all pass clean, with no suppressions.
  • CI runs the suite on Windows, Linux and macOS.

Assets

The source distribution and wheel are attached below. The package is also published to PyPI via Trusted Publishing (OIDC) — no API tokens involved.

Assets 4
Loading