Security Automation with Ansible 2

Collecting file and domain malware identification and classification

One of the initial phases of malware analysis is identification and classification. The most popular source is using VirusTotal to scan and get the results of the malware samples, domain information, and so on. It has a very rich API and a lot of people have written custom apps that leverage the API to perform the automated scans using the API key for identifying the malware type.  The following example is to set up the VirusTotal tool in the system, scan the malware samples against the VirusTotal API, and identify whether or not it's really malware. It generally checks using more than 60 antivirus scanners and tools and provides detailed information.