I would like to see integration with VirusTotal to assist with potentially identifying malware. This would greatly enhance system security security providing another layer of defense.
@CyberKnight thanks for your feedback on integrating VirusTotal. Do you mean a way to add your own key there from VirusTotal, or that we should integrate so everyone has VirusTotal?
Something that you are probably already aware of in AppControl, is that you can click the icon for an app, then a side drawer will open, then you can copy/paste the hash (scroll down to see it) into VirusTotal.
I do have my own VT API key and was making reference to that, I should have been more descriptive. I am new to your tool and I am still learning what I can do. I wasn’t aware of the hash. The hash is nice but I cannot copy and paste into VT uploader. However, It would be nice if I clicked on the hash and it would reveal a VT scan or upload for VT scan. It would be helpful when looking for IOCs.
@CyberKnight yes, great idea and thanks for sharing. Others have requested similar on Discord. We will see if it’s possible to add VirusTotal key integration, if they allow it with our software type. I know they have some strict rules on how their API can be used.
And also, as you say if it was something VT had never seen before then of course the hash would not help at all and it should be uploaded. And speaking of uploaded, I guess that’s a potential privacy issue we need to consider because then theoretically AppControl could upload a sensitive executable to VT if we implemented that, so we need to consider our privacy policy if we could upload something like that. Currently we don’t do that.