malice-sophos
Malice Sophos AntiVirus Plugin
This repository contains a Dockerfile of Sophos for Docker's trusted build published to the public DockerHub.
Dependencies
Installation
- Install Docker.
- Download trusted build from public DockerHub:
docker pull malice/sophos
Usage
docker run --rm malice/sophos EICAR
Or link your own malware folder:
$ docker run --rm -v /path/to/malware:/malware:ro malice/sophos FILE
Usage: sophos [OPTIONS] COMMAND [arg...]
Malice Sophos AntiVirus Plugin
Version: v0.1.0, BuildTime: 20180903
Author:
blacktop - <https://github.com/blacktop>
Options:
--verbose, -V verbose output
--elasticsearch value elasticsearch url for Malice to store results [$MALICE_ELASTICSEARCH_URL]
--table, -t output as Markdown table
--callback, -c POST results to Malice webhook [$MALICE_ENDPOINT]
--proxy, -x proxy settings for Malice webhook endpoint [$MALICE_PROXY]
--timeout value malice plugin timeout (in seconds) (default: 60) [$MALICE_TIMEOUT]
--help, -h show help
--version, -v print the version
Commands:
update Update virus definitions
web Create a Sophos scan web service
help Shows a list of commands or help for one command
Run 'sophos COMMAND --help' for more information on a command.
This will output to stdout and POST to malice results API webhook endpoint.
Sample Output
{
"sophos": {
"infected": true,
"result": "EICAR-AV-Test",
"engine": "5.27.0",
"database": "5.35",
"updated": "20170123"
}
}
Sophos
Infected |
Result |
Engine |
Updated |
true |
EICAR-AV-Test |
5.27.0 |
20170123 |
Documentation
Issues
Find a bug? Want more features? Find something missing in the documentation? Let me know! Please don't hesitate to file an issue.
CHANGELOG
See CHANGELOG.md
Contributing
See all contributors on GitHub.
Please update the CHANGELOG.md and submit a Pull Request on GitHub.
License
MIT Copyright (c) 2016 blacktop