Scan File Hash on VirusTotal

Scan a file hash and get a full VirusTotal report for it.

Installation

Download and install Flowpipe (https://flowpipe.io/downloads). Or use Brew:

brew tap turbot/tap
brew install flowpipe

Clone:

git clone https://github.com/turbot/flowpipe-samples.git
cd security/scan_file_hash_on_virustotal

Install mod dependencies:

flowpipe mod install

Credentials

By default, the following environment variables will be used for authentication:

• VTCLI_APIKEY

You can also create credential resources in configuration files:

vi creds.fpc

credential "virustotal" "my_virustotal" {
  api_key = "AG.U7..."
}

For more information on credentials in Flowpipe, please see Managing Credentials.

Usage

Run the pipeline to scan a file hash and get a full VirusTotal report for it:

flowpipe pipeline run scan_file_hash_on_virustotal --arg file_hash=064a092ae11000000000000000000000000000

Configuration

No additional configuration is required.