{"adoption": {"forks": 597, "observed_at": "2026-08-28T04:08:05.261054+00:00", "stars": 3451}, "canonical_url": "https://ross.abutalabs.com/products/capev2", "card": {"archived": false, "artifact_type": "application", "description": "Malware Configuration And Payload Extraction", "domain": ["security", "reverse-engineering"], "enriched": true, "function": ["security", "reverse-engineering", "monitoring"], "health_score": 79, "homepage": "https://capesandbox.com/analysis/", "language": "Python", "license": "NOASSERTION", "license_family": "other", "maturity": "active", "member_repos": ["kevoreilly/CAPEv2"], "name": "kevoreilly/CAPEv2", "platform": ["windows", "python", "self-hosted"], "pushed_at": "2026-08-23T09:43:49+00:00", "repo": "kevoreilly/CAPEv2", "stars": 3451, "tags": ["malware-sandbox", "cuckoo-fork", "yara", "config-extraction", "unpacking", "threat-intelligence", "sandbox", "malware-analysis", "linux"], "topics": ["configs", "debugging-tools", "malware", "malware-analysis", "malware-research", "reverse-engineering", "sandbox", "unpacking", "cape"], "urls": [], "use_cases": ["detonate malware samples in an isolated sandbox", "extract malware configurations automatically", "unpack packed malware payloads dynamically", "capture network traffic and memory dumps from malware execution", "classify malware using YARA signatures", "analyze malware behavior with API hooking and debugging"], "what_it_is": "CAPEv2 is a malware sandbox derived from Cuckoo that executes malicious files in isolated environments while instrumenting their behavior and collecting forensic artifacts. It adds automated unpacking, YARA-based payload classification, and static/dynamic malware configuration extraction on top of traditional sandbox capabilities.", "when_to_avoid": ["you need static-only analysis without execution", "you cannot dedicate Windows VMs and isolation infrastructure", "you need a simple file scanner rather than dynamic detonation"], "when_to_choose": ["you need automated malware config and payload extraction", "you want a maintained Cuckoo Sandbox successor", "you need YARA-driven unpacking and debugger control of malware", "you run a self-hosted malware analysis lab"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/capev2", "repo": "kevoreilly/CAPEv2", "role": "main", "score": 77}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:08:05.261054+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T18:37:34.281366+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c15578d8ae2fe0104d056ba12c4ff089d60073817153ef27259ac930a7f84026", "fetched_at": "2026-08-28T04:08:05.261054+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevoreilly/CAPEv2"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2514, "days_push": 10, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 77, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}