\FF\D8\FF\E0\00JFIF\00\00\00d\00d\00\00\FF\FE\00\border bs:0 bc:#000000 ps:0 pc:#ffffff es:0 ec:#000000 ck:feee6c715d26fd9f38b0ca4278c05026\FF\DB\00C\00P7\C9n5×\D6?\BDê\9Ds\EBp\9F[`8m\B7)o\B5\E8\E6I\99\FE3]]A2\BA\8Cw\D6E\93\\DEv\C8\009\F2\F1NI?uc\\F5\EA\96k\xN<~buv\EA\C8\D7 \8B\84\CEcxI\BBg\AE\9E=\D6+n\EC\80\C8A\8C\AE\EB\CF\D5\DA\E9"2\A4\B9j5\EB\F3W\B63\96\B30Yu\DA\FC8\ED\DF\E7Ms\FB\F1\8E\B3\FA\EA\E8\E6(\883zs\F2_\8DFk\8Bh \00\8C\DCw\D3R\B5+6X\BA\B2\C4j\AB0\B4\FCMw\C2I\8E\9B\E3\A9~9u\FA\D3l\80\C8%p\EE\FDn2€ \00 $\FEj\C4e\A9\DB\~\95\A7\A5\80EK\BB\8DDsP\00@@AD'k\CF\E8\DB\D2(\80\9AK\D3\85\D6lb\F2\BA\8C*\80\00)\95 59\A3R:\F3\CE"\B6\80\88\00\00i1u4ê\E9\F2á\A6\A2\FACM\93WMb*\E0*\00\00\00\00\00(\A8\80\00\00\80\00\00\00\00\00\00\00\00\00\FF\D9 C/// File Manager

File Manager

Path: /opt/imunify360/venv/share/imunify360/scripts/

Viewing File: track-fpfn-submissions.sh

#!/bin/bash

#set -x

set -euo pipefail

print_help ()
{
    cat << EOF >&2
Usage:

  --help            Print this message
  --get             Get file submissions
    Env variables:
        API_TOKEN - api token from https://cm.imunify.com/#/tokens
        FILE_HASH - hash of file
        SERVER_ID - id from /var/imunify360/license.json
        FILE_PATH - path of file (or part of it)
        NOTE - note (or part of it)
        OWNER - owner:group of file (stat -c '%U:%G'). Mandatory value in general
        SUBMISSION_ID - _id field returned from post/get endpoints
        HOST - domain name
  --post            Post file submission
    Env variables:
        API_TOKEN - api token from https://cm.imunify.com/#/tokens
        FILE_PATH - path to file
        NOTE - note (optional)
        REASON - false_positive or false_negative
EOF
}

check_dependencies() {
    for bin in jq curl; do
        if ! command -v "$bin" >/dev/null 2>&1; then
            echo "Error: required command '$bin' is not installed." >&2
            exit 1
        fi
    done
}

get_submissions()
{
    check_dependencies

    SUBMISSION_API_BASE="${SUBMISSION_API_BASE:-https://api.imunify360.com}"
    VERDICTS_MAX="${VERDICTS_MAX:-100}"
    QUERY_STRING="verdicts_max=${VERDICTS_MAX}"

    if [ -z "${API_TOKEN:-}" ]; then echo "API_TOKEN is required"; exit 1; fi
    if [ ! -z "${FILE_HASH:-}" ]; then QUERY_STRING="${QUERY_STRING}&file_hash=${FILE_HASH}"; fi
    if [ ! -z "${SERVER_ID:-}" ]; then QUERY_STRING="${QUERY_STRING}&server_id=${SERVER_ID}"; fi
    if [ ! -z "${FILE_PATH:-}" ]; then QUERY_STRING="${QUERY_STRING}&file_path=${FILE_PATH}"; fi
    if [ ! -z "${NOTE:-}" ]; then QUERY_STRING="${QUERY_STRING}&note=${NOTE}"; fi
    if [ ! -z "${OWNER:-}" ]; then QUERY_STRING="${QUERY_STRING}&owner=${OWNER}"; fi
    if [ ! -z "${SUBMISSION_ID:-}" ]; then QUERY_STRING="${QUERY_STRING}&submission_id=${SUBMISSION_ID}"; fi
    if [ ! -z "${HOST:-}" ]; then QUERY_STRING="${QUERY_STRING}&hostname=${HOST}"; fi
    echo "QUERY_STRING=${QUERY_STRING}"
    curl -s  ${SUBMISSION_API_BASE}/api/c-management/file-submission?${QUERY_STRING} -H "X-APIToken: ${API_TOKEN}" | jq
}

post_submission()
{
    check_dependencies

    LICENSE_PATH="${LICENSE_PATH:-/var/imunify360/license.json}"
    IAID_TOKEN_PATH="${IAID_TOKEN_PATH:-/var/imunify360/iaid-token}"

    if [ -z "${API_TOKEN:-}" ]; then echo "API_TOKEN is required"; exit 1; fi
    SERVER_ID=$(cat ${LICENSE_PATH} | jq -r .id)
    if [ -z "${FILE_PATH:-}" ]; then echo "FILE_PATH is required"; exit 1; fi
    FILE_PATH=$(readlink -f "${FILE_PATH}")
    if [ ! -f "${FILE_PATH}" ]; then echo "${FILE_PATH} does not exist"; exit 1; fi
    if [ -z "${REASON:-}" ]; then echo "REASON is required"; exit 1; fi


    SUBMISSION_API_BASE="${SUBMISSION_API_BASE:-https://api.imunify360.com}"
    UPLOAD_API_BASE="${UPLOAD_API_BASE:-https://api.imunify360.com}"
    REQUEST_BODY=$(jq -n \
      --arg server_id "$SERVER_ID" \
      --arg file_path "$FILE_PATH" \
      --arg note "${NOTE:-}" \
      --arg reason "$REASON" \
      '{server_id: $server_id, file_path: $file_path, note: $note, reason: $reason, should_push_agent: false}')

    echo "${REQUEST_BODY}" | jq
    SUBMISSION_CREATE_RESP=$(curl -s ${SUBMISSION_API_BASE}/api/c-management/file-submission -H "X-APIToken: ${API_TOKEN}" -H "Content-Type: application/json" -d "${REQUEST_BODY}" -X POST)
    echo "${SUBMISSION_CREATE_RESP}" | jq
    SUBMISSION_ID=$(echo "${SUBMISSION_CREATE_RESP}" | jq -r .result._id)
    OWNER=$(stat -c '%U:%G' "${FILE_PATH}")
    UPLOAD_RESP=$(curl ${UPLOAD_API_BASE}/api/v2/upload -F owner="${OWNER}" -F submission_id="${SUBMISSION_ID}" -F file=@"${FILE_PATH}" -H "X-Auth: $(cat ${IAID_TOKEN_PATH})")
    echo "${UPLOAD_RESP}" | jq
}

case "${1:-}" in
-h|--help)
print_help
;;
-p|--post)
post_submission
;;
-g|--get)
get_submissions
;;
*)
print_help
;;
esac