Auto-Submit Attachments from Messages to VirusTotal
Voltooid
Has anyone found a way to build an action and YARA rule that will automatically submit attachments from messages to VirusTotal? We have VT integrated with our platform but before I go down the rabbit hole, I want to see if it's been done.
-
Officiële opmerking
Hello Ryan,
Thank you for submitting your feature request to the community board! We have released a feature that will allow you to automatically submit attachment hashes, as Bruce mentioned previously. If automatic scanning is enabled, VirusTotal will automatically be sent a hash of all attachments and/or URLs received by your PhishER inbox.
To enable this feature, follow the steps below:
1. Log into PhishER
2. Go to the Settings tab
3. Select VirusTotal under Integrations
4. Enable VirusTotal as well as the two Automatic scanning options
Note that you will need a VirusTotal key in order to enable this option.
For more information you can read this article on the VirusTotal Automatic Scanning feature, as well as receiving a VirusTotal key.
Ashley Rush
KnowBe4
Acties voor opmerkingen -
It looks like this was just introduced as a feature in PhishER. You don't need to use YARA rules to accomplish it. In your account settings, click on Virus Total. There are 2 options to enable sending all attachments and hashes automatically now.
I just enabled it in our console.
U moet u aanmelden om een opmerking te plaatsen.
Opmerkingen
2 opmerkingen