Scan File Hash on VirusTotal

Scan a file hash and get a full VirusTotal report for it.

Installation

Download and install Flowpipe (https://flowpipe.io/downloads). Or use Brew:

brew tap turbot/tap
brew install flowpipe

Clone:

git clone https://github.com/turbot/flowpipe-samples.git
cd security/scan_file_hash_on_virustotal

Install mod dependencies:

flowpipe mod install

Connections

By default, the following environment variables will be used for authentication:

• VTCLI_APIKEY

You can also create connection resources in configuration files:

vi conns.fpc

connection "virustotal" "my_virustotal" {
  api_key = "AG.U7..."
}

For more information on connections in Flowpipe, please see Managing Connections.

Usage

Run the pipeline to scan a file hash and get a full VirusTotal report for it:

flowpipe pipeline run scan_file_hash_on_virustotal --arg file_hash=064a092ae11000000000000000000000000000

Configuration

No additional configuration is required.