dmkebusinessgmbh / dmkhunter Goto Github PK

We should provide a notification about the current violations. go provides already a smtp wrapper so we can use this.

We only need to define, how the template should looks like.

After a run, i would like to get notified about violations, so i can react and shutdown the site or fix them.
We should provide an webhook so everyone can use this, to some generic things.

Our currently used tool, generate the hash for each file and checks then against this.

I started an lightweight implementation which uses boltdb to store the hashes of each file and check than against this hash. This nearly the same we already have, but i'm not sure if this is the way to go.

My currently problem is, the database will grown very quickly, because boltdb does not support database compression. We could move to an other embeded database but the database engine should be an embedded database so we don't need to provide an external server.

We would like scan files, if they are infected or contain mailicous code.
We could use clamav for this point, because they already do a great job and we could allow remote connections so a local clamav is not needed.

As i started this project i decieded to use the toml format, for the configuration.
Currently the application will looks for an .hunter.conf file in the current working directory and reads this.

The currently configuration format should looks like this:

[analyzers]
[analyzers.db]
  analzyer = "db"
  paths = ["src/**"]

[reporters]
  [reporters.smtp]
   username = "user"
   password = "user"
   host = "smtp.gmail.com"