Security Automation with Ansible 2

VirusTotal API scan for malware samples

Once we have the setup ready, it is as simple as using the Ansible playbook to run a scan for the list of malware samples. The following playbook will find and copy the local malware samples to a remote system and scan them recursively and return the results. Once the scan has been completed, it will remove the samples from the remote system:

- name: scanning file in VirusTotal  hosts: malware  remote_user: ubuntu  vars:    vt_api_key: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX #use Ansible-vault    vt_api_type: public # public/private    vt_intelligence_access: False # True/False    files_in_local_system: /tmp/samples/    files_in_remote_system: /tmp/sample-file/  tasks:    - name: creating samples directory      file: path: "{{ files_in_remote_system ...