VirusTotal Cog

The VirusTotal cog integrates with VirusTotal’s API to automatically scan file attachments for malware and viruses.

Features

Automatic Scanning

  • Scans all file attachments for malware
  • SHA256 hash-based lookups
  • VirusTotal API integration
  • Detection from multiple security vendors

File Analysis

  • Identifies risky file extensions
  • Checks attachment hashes against database
  • Provides detailed scan results
  • Color-coded threat levels

Access Control

  • Exclude specific channels from scanning
  • Exclude trusted roles from scanning
  • Exclude individual users from scanning
  • Configurable per-server

Commands

VirusTotal operates automatically on file uploads. Configuration is done via /config cog VirusTotal

Configuration

Setup VirusTotal scanning:

  • Enabled - Toggle file scanning
  • Excluded Channels - Channels to skip scanning
  • Excluded Roles - Trusted roles whose files skip scanning
  • Excluded Members - Users whose files skip scanning

VirusTotal API key required in bot configuration.

Best Practices

  1. Keep API key secure and private
  2. Monitor scan results and take action
  3. Inform users about automatic scanning
  4. Review exclusions regularly
  5. Check for recurring problematic uploads
  6. Educate users about suspicious files