VirusTotal Plugin for Steampipe

Use SQL to query file, domain, URL and IP scanning results from VirusTotal.

• Get started
• Documentation: Table definitions & examples
• Community: Slack Channel
• Get involved: Issues

Quick start

Install the plugin with Steampipe:

steampipe plugin install virustotal

Run a query:

select
  meaningful_name,
  reputation
from
  virustotal_file
where
  path = '/full/path/to/file'

Developing

Prerequisites:

• Steampipe
• Golang

Clone:

git clone https://github.com/turbot/steampipe-plugin-virustotal.git
cd steampipe-plugin-virustotal

Build, which automatically installs the new version to your ~/.steampipe/plugins directory:

make

Configure the plugin:

cp config/* ~/.steampipe/config
vi ~/.steampipe/config/virustotal.spc

Try it!

steampipe query
> .inspect virustotal

Further reading:

• Writing plugins
• Writing your first table

Contributing

Please see the contribution guidelines and our code of conduct. All contributions are subject to the Apache 2.0 open source license.

help wanted issues:

• Steampipe
• VirusTotal Plugin