https://github.com/malice-plugins/team-cymru
Malice TeamCymru Hash Lookup Plugin
https://github.com/malice-plugins/team-cymru
docker malice malice-plugin maliceio teamcymru
Last synced: about 1 month ago
JSON representation
Malice TeamCymru Hash Lookup Plugin
- Host: GitHub
- URL: https://github.com/malice-plugins/team-cymru
- Owner: malice-plugins
- License: mit
- Created: 2015-12-31T00:11:00.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2024-11-15T19:41:34.000Z (6 months ago)
- Last Synced: 2025-03-21T22:11:20.576Z (2 months ago)
- Topics: docker, malice, malice-plugin, maliceio, teamcymru
- Language: Go
- Homepage:
- Size: 21.5 KB
- Stars: 3
- Watchers: 1
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
team-cymru
Malice TeamCymru - Malware Hash Registry Plugin
This repository contains a **Dockerfile** of TeamCymru's [Malware Hash Registry](http://www.team-cymru.org/MHR.html) for [Docker](https://www.docker.io/)'s [trusted build][hub] published to the public [DockerHub](https://hub.docker.com).
### Dependencies
* [gliderlabs/alpine](https://index.docker.io/_/gliderlabs/alpine/)
### Installation
1. Install [Docker](https://www.docker.io/).
2. Download [trusted build](https://hub.docker.com/r/malice/team-cymru/) from public [DockerHub](https://hub.docker.com): `docker pull malice/team-cymru`
### Usage
docker run --rm malice/team-cymru (MD5|SHA1)
```bash
Usage: team-cymru [OPTIONS] COMMAND [arg...]
Malice TeamCymru - Malware Hash Registry Plugin
Version: v0.1.0, BuildTime: 20160228
Author:
blacktop -
Options:
--post, -p POST results to Malice webhook [$MALICE_ENDPOINT]
--proxy, -x proxy settings for Malice webhook endpoint [$MALICE_PROXY]
--table, -t output as Markdown table
--help, -h show help
--version, -v print the version
Commands:
help Shows a list of commands or help for one command
Run 'team-cymru COMMAND --help' for more information on a command.
```
This will output to stdout and POST to malice results API webhook endpoint.
### Sample Output JSON:
```json
{
"team-cymru": {
"found": true,
"lastseen": "2017-01-12",
"detection": "86%"
}
}
```
### Sample Output STDOUT (Markdown Table):
---
#### TeamCymru
| Found | Detection | LastSeen |
| ----- | --------- | ---------- |
| true | 86% | 2017-01-12 |
---
### To Run on OSX
- Install [Homebrew](http://brew.sh)
```bash
$ brew install caskroom/cask/brew-cask
$ brew cask install virtualbox
$ brew install docker
$ brew install docker-machine
$ docker-machine create --driver virtualbox malice
$ eval $(docker-machine env malice)
```
### Documentation
### Issues
Find a bug? Want more features? Find something missing in the documentation? Let me know! Please don't hesitate to [file an issue](https://github.com/maliceio/malice-team-cymru/issues/new) and I'll get right on it.
### Credits
### License
MIT Copyright (c) 2016 **blacktop**
[hub]: https://hub.docker.com/r/malice/team-cymru/