{"id":149,"date":"2024-03-18T20:09:19","date_gmt":"2024-03-18T20:09:19","guid":{"rendered":"https:\/\/shaynepatelcybersecurityportfolio.online\/?p=149"},"modified":"2024-03-18T20:09:19","modified_gmt":"2024-03-18T20:09:19","slug":"malware-detection-using-virustotal-and-wazuh","status":"publish","type":"post","link":"https:\/\/shaynepatelcybersecurityportfolio.online\/?p=149","title":{"rendered":"Malware Detection using VirusTotal and Wazuh"},"content":{"rendered":"\n

In this lab, I will build off the agent from the previous lab and add VirusTotal to detect malware in real-time. Detecting and eliminating malware is crucial to maintaining system functionality and preventing illegal access, data breaches, and monetary losses. VirusTotal helps scan any suspicious file against hundreds of Antivirus engines. Wazuh has the capability to integrate VirusTotal for real-time malware detection.<\/mark><\/p>\n\n\n\n

My first step was learning how to integrate external APIs into Wazuh through reading documentation. Wazuh uses an integrator daemon allowing it to connect to alerting tools like VirusTotal and others. The steps went as follows:<\/mark><\/p>\n\n\n\n