From 19d701ddf07d855128ded0cf2b573ce468e3bdd6 Mon Sep 17 00:00:00 2001 From: Ashlee Young Date: Wed, 20 Jan 2016 01:10:01 +0000 Subject: Removing Suricata and Audit from source repo, and updated build.sh to avoid building suricata. Will re-address this in C release via tar balls. Change-Id: I3710076f8b7f3313cb3cb5260c4eb0a6834d4f6e Signed-off-by: Ashlee Young --- .../contrib/file_processor/Processor/VirusTotal.pm | 39 ---------------------- 1 file changed, 39 deletions(-) delete mode 100644 framework/src/suricata/contrib/file_processor/Processor/VirusTotal.pm (limited to 'framework/src/suricata/contrib/file_processor/Processor/VirusTotal.pm') diff --git a/framework/src/suricata/contrib/file_processor/Processor/VirusTotal.pm b/framework/src/suricata/contrib/file_processor/Processor/VirusTotal.pm deleted file mode 100644 index 91a9939e..00000000 --- a/framework/src/suricata/contrib/file_processor/Processor/VirusTotal.pm +++ /dev/null @@ -1,39 +0,0 @@ -package Processor::VirusTotal; -use Moose; -extends 'Processor'; -use Data::Dumper; -use LWP::UserAgent; - -has 'md5' => (is => 'ro', isa => 'Str', required => 1); -has 'ua' => (is => 'rw', isa => 'LWP::UserAgent', required => 1, default => sub { return LWP::UserAgent->new(agent => 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.1) Gecko/20100101 Firefox/10.0.1'); }); -has 'url' => (is => 'ro', isa => 'Str', required => 1, default => 'https://www.virustotal.com/vtapi/v2/file/report'); -sub name { 'VirusTotal' } -sub description { 'Processor for virustotal.com' } - -sub process { - my $self = shift; - unless ($self->conf->{virustotal_apikey}){ - warn('No VirusTotal apikey configured in config file'); - return 0; - } - $self->log->debug('Getting url ' . $self->url); - #$self->log->debug('md5: ' . $self->md5 . ', apikey: ' . $self->conf->{virustotal_apikey}); - my $response = $self->ua->post($self->url, { resource => $self->md5, apikey => $self->conf->{virustotal_apikey} }); - #$self->log->debug(Dumper($response)); - if ($response->code eq 200){ - my $data = $self->json->decode($response->decoded_content); - $self->log->debug('data: ' . Dumper($data)); - if ($data->{positives}){ - return $data; - } - else { - return 0; - } - } - else { - $self->log->debug('Communications failure: ' . Dumper($response)); - return 0; - } -} - -1 \ No newline at end of file -- cgit 1.2.3-korg