feat: initial Assemblyline support

Signed-off-by: Richard Zak <[email protected]>

Author: rjzak

Cargo.lock

@@ -15,6 +15,7 @@ build = "build.rs"
 default = []
 admin = ["dep:dialoguer", "dep:flate2", "malwaredb-server/admin", "dep:chrono", "dep:walkdir", "dep:zip"]
 admin-gui = ["malwaredb-server/admin", "dep:slint", "dep:slint-build", "futures/executor"]
+assemblyline = ["malwaredb-server/assemblyline"]
 sqlite = ["malwaredb-server/sqlite"]
 vt = ["malwaredb-server/vt", "dep:malwaredb-virustotal"]
 
@@ -99,6 +100,7 @@ aes-gcm = { version = "0.10.3", default-features = false }
 anyhow = { version = "1.0", default-features = false }
 app-memory-usage-fetcher = { version = "0.2.1", default-features = false }
 argon2 = { version = "0.5.3", default-features = false }
+assemblyline-markings = { version = "0.1.10", default-features = false }
 axum = { version = "0.8.4", default-features = false }
 axum-server = { version = "0.7.2", default-features = false }
 base64 = { version = "0.22.1", default-features = false }

Cargo.toml

@@ -10,7 +10,12 @@ description = "Common API endpoints and data types for MalwareDB components."
 keywords.workspace = true
 categories = ["api-bindings", "data-structures"]
 
+[features]
+default = []
+assemblyline = ["dep:assemblyline-markings"]
+
 [dependencies]
+assemblyline-markings = { workspace = true, optional = true }
 chrono = { workspace = true, features = ["serde"] }
 hex = { workspace = true, features = ["alloc"] }
 serde = { workspace = true, features = ["derive", "std"] }

crates/api/Cargo.toml

@@ -6,6 +6,9 @@
 #![deny(clippy::pedantic)]
 #![forbid(unsafe_code)]
 
+/// Data types and API endpoints for Assemblyline integration
+#[cfg(feature = "assemblyline")]
+pub mod assemblyline;
 /// Wrapper for fixed-size hash digests from hex strings
 pub mod digest;
 

crates/api/src/lib.rs

@@ -14,6 +14,7 @@ build = "build.rs"
 [features]
 default = []
 admin = []
+assemblyline = ["malwaredb-api/assemblyline"]
 sqlite = ["dep:rusqlite"]
 vt = ["dep:malwaredb-virustotal", "postgres/with-serde_json-1"]
 

crates/server/Cargo.toml

@@ -30,6 +30,8 @@ CREATE TABLE file (
     nonce bytea[],
     key int REFERENCES encryptionkey(id),
     parent bigint REFERENCES file(id),
+    assemblyline_data json,
+    assemblyline_tlp text,
     PRIMARY KEY (id)
 );
 

crates/server/src/db/malwaredb_pg.sql

@@ -46,7 +46,9 @@ CREATE TABLE file (
     confirmedmalicious integer, -- boolean
     nonce text, -- hex bytes
     key int REFERENCES encryptionkey(id),
-    parent int REFERENCES file(id)
+    parent int REFERENCES file(id),
+    assemblyline_data text, -- JSON
+    assemblyline_tlp text
 );