add pescan yall 🎉

maliceio · Aug 20, 2018 · 00ac8b5 · 00ac8b5
1 parent e670173
commit 00ac8b5
Show file tree

Hide file tree

Showing 6 changed files with 94 additions and 10 deletions.
diff --git a/.release/VERSION b/.release/VERSION
@@ -1 +1 @@
-v0.3.14
+v0.3.15
diff --git a/config/bindata.go b/config/bindata.go
diff --git a/config/config.toml b/config/config.toml
@@ -6,7 +6,7 @@
 #######################################################################
 
 title = "Malice Runtime Configuration"
-version = "v0.3.14"
+version = "v0.3.15"
 
 [author]
   name = "blacktop"

diff --git a/docker-compose.yml b/docker-compose.yml
@@ -0,0 +1,83 @@
+version: "3"
+
+services:
+  avg:
+    image: malice/avg
+    links:
+      - rethink
+    command: -t befb88b89c2eb401900a68e9f5b78764203f2b48264fcc3f7121bf04a57fd408
+    volumes:
+      - ../data/samples:/malware:ro
+    networks:
+      - malice
+  bitdefender:
+    image: malice/bitdefender
+    links:
+      - rethink
+    command: -t befb88b89c2eb401900a68e9f5b78764203f2b48264fcc3f7121bf04a57fd408
+    volumes:
+      - ../data/samples:/malware:ro
+    networks:
+      - malice
+  clamav:
+    image: malice/clamav
+    links:
+      - rethink
+    command: -t befb88b89c2eb401900a68e9f5b78764203f2b48264fcc3f7121bf04a57fd408
+    volumes:
+      - ../data/samples:/malware:ro
+    networks:
+      - malice
+  comodo:
+    image: malice/comodo
+    links:
+      - rethink
+    command: -t befb88b89c2eb401900a68e9f5b78764203f2b48264fcc3f7121bf04a57fd408
+    volumes:
+      - ../data/samples:/malware:ro
+    networks:
+      - malice
+  fprot:
+    image: malice/fprot
+    links:
+      - rethink
+    command: -t befb88b89c2eb401900a68e9f5b78764203f2b48264fcc3f7121bf04a57fd408
+    volumes:
+      - ../data/samples:/malware:ro
+    networks:
+      - malice
+  # ELK
+  elk:
+    image: blacktop/elk
+    ports:
+      - "9200:9200"
+      - "80:80"
+    networks:
+      - malice
+  # LOGSTASH
+  logstash:
+    build: ./logstash
+    links:
+      - rethink
+      - elk:elasticsearch
+    networks:
+      - malice
+  # RETHINKDB
+  rethink:
+    container_name: rethink
+    image: rethinkdb
+    ports:
+      - "28015:28015"
+      - "8081:8080"
+    volumes:
+      - malice:/data
+    networks:
+      - malice
+
+volumes:
+  ? malice
+  ? es_data
+
+networks:
+  malice:
+    driver: bridge
diff --git a/plugins/bindata.go b/plugins/bindata.go
diff --git a/plugins/plugins.toml b/plugins/plugins.toml
@@ -231,14 +231,15 @@ title = "Malice Plugin Configurations"
   env = ["MALICE_TIMEOUT"]
 
 [[plugin]]
-  enabled = false
-  name = "exe"
+  enabled = true
+  name = "pescan"
   description = "PE - tool to triage portable executables"
   category = "exe"
-  image = "malice/exe"
-  repository = "https://github.com/malice-plugins/exe.git"
+  image = "malice/pescan"
+  repository = "https://github.com/malice-plugins/pescan.git"
   build = false
   mime = "application/x-dosexec"
+  cmd = "scan"
   env = ["MALICE_TIMEOUT"]
 
 [[plugin]]