Cyberdefense/DeepBlueCLI
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README-DeepBlueHash.md

Browse Source
This commit is contained in:
Eric Conrad
2023-06-27 14:37:10 -04:00
committed by GitHub
parent fc670716d6
commit 1699dfc5cf
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
READMEs/README-DeepBlueHash.md
View File

@ -6,6 +6,13 @@ Parses the Sysmon event logs, grabbing the SHA256 hashes from process creation (
## VirusTotal and Safelisting setup
**Note**: Virustotal has changed their free API, and now severelly limits the number of lookups you can do for free. It was one every 15 seconds, but is now:
- Daily quota 1 lookups / day
- Monthly quota 31 lookups / month
I reached to to them to see how much a paid API will cost for this purpose. I may retire this tool if the cost is prohibitive.
Setting up VirusTotal hash submissions and safelisting:
The hash checker requires Post-VirusTotal: