Claude 24f816b6a3
Consolidate 22 sibling repos into layered organism structure
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2026-06-10 06:53:01 +00:00

1.4 KiB

API Reference: Malpedia Malware Family Analysis

Base URL

https://malpedia.caad.fkie.fraunhofer.de/api

Authentication

Authorization: apitoken YOUR_API_KEY

List Families

GET /list/families

Returns dict of {family_name: {alt_names, description, attribution, urls}}.

Get Family Details

GET /get/family/{family_name}
Field Description
common_name Primary family name
alt_names List of alternative names
description Family description
attribution List of attributed threat actors
urls Reference URLs

Get YARA Rules

GET /get/yara/{family_name}

Returns dict of YARA rules keyed by rule source.

List Actors

GET /list/actors

Returns dict of {actor_name: {alt_names, description, families}}.

Get Actor Details

GET /get/actor/{actor_name}
Field Description
common_name Actor name
description Actor profile
families Associated malware families
alt_names Alternative names (APT designations)

Get Sample

GET /get/sample/{sha256}
GET /get/sample/{sha256}/zip

Relationship Types

Relation Description
also_known_as Family alias
shared_actor Families used by same threat actor
variant_of Derived malware variant

MITRE ATT&CK

  • T1587.001 - Develop Capabilities: Malware