Three SensorRE software packages are required:
- https://github.com/mozark24/RE_Provenance_System
- https://github.com/mozark24/Binja-Plugin-Autocollect
- https://github.com/mozark24/SensorRE_Server
Required Javascript packages:
- node (tested on 8.12.0)
- yarn
Clone this repository, then:
- yarn install
- yarn start
To run the full provenance system with Binary Ninja:
- Open Binary Ninja
- Select binary to analyze
- Install the Binary Ninja Plugin at: https://github.com/mozark24/Binja-Plugin-Autocollect
- Start plugin in Binary Ninja > 'Binja Start/Stop XML Server'
- Modify autocollect.py for your environment (fullpath)
- Open Admin PowerShell window
- Install the SensorRE server at: https://github.com/mozark24/SensorRE_Server
- Navigate to the directory SensorRE server was installed: Binja-NodeJS
- In an Admin Powershell window run the command: node .\fileupdate.js
- Open new Powershell window
- Navigate to the directory: RE_Provenance_System
- yarn start
- Open Browswer (Chrome tested)
- Navigate to: http://localhost:8080/
- Begin analyzing binary in Binary Ninja