GitHub - deadbits/yaraVT: Scan files with Yara and send rule matches to VirusTotal reports as comments
Skip to content
This repository has been archived by the owner on Jan 13, 2023. It is now read-only.
/ yaraVT Public archive

Scan files with Yara and send rule matches to VirusTotal reports as comments

Notifications You must be signed in to change notification settings

deadbits/yaraVT

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Yara VirusTotal Commenter

You know you scan files with Yara anyways, why not give your findings back to the community?
This script can scan a folder of samples against a provided Yara ruleset and optionally submit the matching Yara rule names to each files respective VirusTotal report as a comment.

Important: Use this script only with high-confidence Yara rules to avoid spamming VT with misleading comments

Pre-Alpha

This code hasn't yet been tested in any real way. I would not recommend using it :)

Usage

$ python yara_vt.py --help                                                                                                                                                 (master)
usage: yara_vt.py [-h] -r RULES -s SAMPLES [-k KEY] -c

Scan directory with Yara and submit matches to VirusTotal samples as comments

optional arguments:
  -h, --help            show this help message and exit

Yara:
  -r RULES, --rules RULES
                        yara rules directory
  -s SAMPLES, ---samples SAMPLES
                        samples directory to scan

VirusTotal:
  -k KEY, --key KEY     virustotal API key
  -c, --comment         submit virustotal comments

About

Scan files with Yara and send rule matches to VirusTotal reports as comments

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages