You are an IT security specialist in your firm and you are always wondering "How the heck can I limit virus spreading from USB devices in this damn information system ?"
Your boss won't let you buy this very expensive USB kiosk you saw during your last trip in a cyber security trade show ?
The tool I'm going to present you might be the solution !
Decontamine_Linux, a Python script I have been working on, aims to scan and clean your USB devices (keys, hard drives) from viruses. It can also scan CD/DVD in read only mode.
It automatically detects your devices, lets you choose the one you want to scan then runs scanning tools in multiple threads.
It asks you if you want to delete viruses and eventually generates a report you can read and save on your device.
Currently its compatible with 3 antivirus:
- Clamav
- Sophos
- F-Secure
I have been planning to add more and also add other (open source) scanning tools targeting specific files.
Use case
- Setup an hardening Debian system on a computer with antivirus and Decontamine_Linux
- Enable persistence of the script
- Kindly ask your colleagues, with the blessing of your boss, to systematically scan their USB devices before plugging in their computer
- Marvel about the decreased of security incidents related to USB devices in your company
Demo
Interested ? : visit my website !
You want to contribute or you find an issue : please pull a request or open an issue on its Github repo !
If you like this project, please share it and star it !
You can also buy me a coffee ;) !
PS : Why this name ? At the beginning, I created Decontamine to run on Windows (there are still running Windows Decontamine stations at the organization I originally developed it between 2015 and 2018), one day I realize it would be better to run it on Linux.
So, after this former employer had accepted this software to go open source, I have been rewriting everything especially for Linux.
PS2 : As a cybersecurity specialist, you should sensitize your colleagues to the hazardousness of USB devices !
Top comments (1)
nice Project. is there a way to integrate ESET in this Project