Enhancement: Easy VirusTotal Submission of Blocked Binaries

[gbradcurtis]

Feature Request: Enhance Utility with VirusTotal Integration

Use Case 1: Submit Blocked Binaries from Pop-Up Window

Currently, when Santa blocks a binary, a pop-up window appears informing the user. I propose adding a new button or option within this window labeled "Submit to VirusTotal" or similar. Clicking this button would:

1. Extract the necessary information about the blocked binary or binaries (path, hash, etc.).
2. Automatically submit this information to VirusTotal for scanning.
3. Ideally, display a brief message indicating the submission status (e.g., "Submitted for scanning") or any errors encountered.
4. Optionally, provide a link or button to view the scan results on VirusTotal once available.

Use Case 2: Submit Blocked Binaries via Command Line

I also request adding a new option to the santa command line utility, such as --submit-to-virustotal or similar. This option would:

1. Take the path or hash of a blocked binary as an argument.
2. Submit this information to VirusTotal for scanning.
3. Provide feedback on the console about the submission status and any potential errors.
4. Optionally, output a link or the scan ID to allow users to check the results on VirusTotal later.

Benefits:

Improved Security: Allows users to quickly and easily check the reputation of blocked binaries, aiding in identifying potential threats.
Streamlined Workflow: Eliminates the need to manually submit files to VirusTotal, saving time and effort for users.
Enhanced User Experience: Provides additional context and actionable options within the Santa interface and command line tool.

Additional Considerations:

• API Integration: Ensure proper integration with the VirusTotal API, including handling authentication, rate limits, and error conditions.
• Privacy: Consider any privacy implications and provide appropriate user controls or notifications regarding data sharing with VirusTotal.
• User Interface: Design the new button/option and command line syntax in a clear and intuitive manner, consistent with the existing Santa interface.