This is for a research project.
I need to create an application running on a web server (running centos) to do following thing.
There is a working web server and another server running cuckoo malware analysis server.
The app should get a dump of all running processes in the web server and send to the cuckoo server and get the analysis one by one. by using it, the app identify the processes are malicious or not.
If any malicious process found, it need to quarantine. if the process is not malicious, it add to a MySQL database and doesn't send it to the cuckoo server again and again.