Giter VIP home page Giter VIP logo

clamav-report's Introduction

clamav-report ๐Ÿฆช๐Ÿ“Š

GitHub Build Status CodeQL Coverage Status Known Vulnerabilities

This is a tool that will collect ClamAV data using an Ansible inventory and create a CSV file that is able to be ingested by legacy compliance tools.

It assumes that ClamAV has been installed using the Ansible ClamAV role.

Usage

$ clamav-report tests/files/inventory.txt clamav-201909.csv

2019-09-09 15:39:41,256 INFO Gathering ClamAV data from remote servers.
2019-09-09 15:39:42,292 WARNING Task callback UNREACHABLE: borked.foo.gov - Gathering Facts
2019-09-09 15:39:47,268 INFO Generating consolidated virus report: clamav-201909.csv

For gathering ClamAV log data from AWS instances that are accessible via SSM, the clamav_log_report.sh shell script has been provided in the extras directory:

$ ./extras/clamav_log_report.sh i-0123456789abcdef0

Starting session with SessionId: iam.username-0123456789abcdef0

bar.foo.gov
----------- SCAN SUMMARY -----------
Known viruses: 8654853
Engine version: 0.103.6
Scanned directories: 5141
Scanned files: 42629
Infected files: 0
Data scanned: 2949.27 MB
Data read: 3249.70 MB (ratio 0.91:1)
Time: 574.106 sec (9 m 34 s)
Start Date: 2023:03:05 06:47:01
End Date:   2023:03:05 06:56:35

Exiting session with sessionId: david.redmin-0123456789abcdef0.

Contributing

We welcome contributions! Please see CONTRIBUTING.md for details.

License

This project is in the worldwide public domain.

This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.

All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.

clamav-report's People

Contributors

arcsector avatar dav3r avatar dependabot[bot] avatar felddy avatar hillaryj avatar jasonodoom avatar jmorrowomni avatar jsf9k avatar mcdonnnj avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

clamav-report's Issues

Support SSM sessions when SSH is not available

๐Ÿ’ก Summary

It would be really useful if this tool could be used when the hosts containing ClamAV data are only accessible via AWS SSM sessions, as opposed to SSH.

Motivation and context

Previously, we had SSH access to our hosts and this tool could be run like so:

clamav-report --become host-inventory.yml clamav-results.csv

Now that we have disabled SSH access and only access our hosts via SSM sessions, the method above no longer works:

2023-01-06 15:44:01,381 INFO Gathering ClamAV data from remote servers.
2023-01-06 15:44:03,194 WARNING Task callback UNREACHABLE: i-0123456789abcdef - Gathering Facts

Implementation notes

Investigate whether community.aws.aws_ssm connection can meet this need.

Acceptance criteria

  • ClamAV data can be gathered from hosts only accessible by SSM sessions
  • ClamAV data can still be gathered from hosts accessible by SSH

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.