Skip to content
This repository has been archived by the owner on Oct 5, 2019. It is now read-only.

VirusTotal Integration #163

Open
DFIR-Zach opened this issue May 24, 2018 · 1 comment
Open

VirusTotal Integration #163

DFIR-Zach opened this issue May 24, 2018 · 1 comment

Comments

@DFIR-Zach
Copy link

I just now see that you forked off of OSXAuditor. They had a feature to compare file reputations against Team Cymru's MHR, VirusTotal, or your own local database. Is this feature in osxcollector or intend to be brought into the tool? Right now we are manually checking the md5s pulled from the osxcollector json file in external sources.

We are trying to use this application to compare a mac machine using before and after snapshots of osxcollector to try and see if there was a compromise by using the delta data. If anyone has any thoughts of how we could better utilize this tool for our use case it would be GREATLY appreciated. Thanks!

@siftuser
Copy link

siftuser commented Mar 6, 2019

Interesting thought ... were you able to accomplish this ?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants