thdotnet / comodo

Malice Comodo AntiVirus Plugin

malice-comodo

This repository contains a Dockerfile of comodo for Docker's trusted build published to the public DockerHub.

Dependencies

• ubuntu:precise (104 MB)

Installation

1. Install Docker.
2. Download trusted build from public DockerHub: docker pull malice/comodo

Usage

docker run --rm malice/comodo EICAR

Or link your own malware folder:

$ docker run --rm -v /path/to/malware:/malware:ro malice/comodo FILE

Usage: comodo [OPTIONS] COMMAND [arg...]

Malice Comodo AntiVirus Plugin

Version: v0.1.0, BuildTime: 20170122

Author:
  blacktop - <https://github.com/blacktop>

Options:
  --table, -t	       output as Markdown table
  --callback, -c	    POST results to Malice webhook [$MALICE_ENDPOINT]
  --proxy, -x	       proxy settings for Malice webhook endpoint [$MALICE_PROXY]
  --timeout value       malice plugin timeout (in seconds) (default: 60) [$MALICE_TIMEOUT]    
  --elasitcsearch value elasitcsearch address for Malice to store results [$MALICE_ELASTICSEARCH]   
  --help, -h	        show help
  --version, -v	     print the version

Commands:
  update	Update virus definitions
  web       Create a Comodo scan web service  
  help		Shows a list of commands or help for one command

Run 'comodo COMMAND --help' for more information on a command.

Sample Output

JSON:

{
  "comodo": {
    "infected": true,
    "result": "Malware",
    "engine": "1.1",
    "updated": "20170122"
  }
}

Markdown:

---

Comodo

Infected	Result	Engine	Updated
true	Malware	13.0.3114	20170122

---

Documentation

• To write results to ElasticSearch
• To create a Comodo scan micro-service
• To post results to a webhook
• To update the AV definitions

Issues

Find a bug? Want more features? Find something missing in the documentation? Let me know! Please don't hesitate to file an issue.

CHANGELOG

See CHANGELOG.md

Contributing

See all contributors on GitHub.

Please update the CHANGELOG.md and submit a Pull Request on GitHub.

License

MIT Copyright (c) 2016-2017 blacktop