From 17ab129b7bce66420128426157f4c89d4af1b425 Mon Sep 17 00:00:00 2001 From: Eric Conrad Date: Thu, 7 Sep 2017 11:49:20 -0400 Subject: [PATCH] Update README.md --- README.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/README.md b/README.md index eaf79a7..dd12afb 100644 --- a/README.md +++ b/README.md @@ -99,3 +99,15 @@ Thank you: @heinzarelli and @HackerHurricane Install Sysmon from Sysinternals: https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon Log SHA1 hashes. Others are fine; DeepBlueCLI will use SHA1. + +## VirusTotal/Whitelisting Setup + +The hash checker requires Post-VirusTotal: + + - https://github.com/darkoperator/Posh-VirusTotal + +It also requires a VirusTotal API key: + + - https://www.virustotal.com/en/documentation/public-api/ + +The script assumes a personal API key, and waits 15 seconds between submissions.