getsuspect - zMarch/Orc GitHub Wiki
getsuspect
Name
getsuspect - pulls down my suspect script and runs it
Synopsis
getsuspect
Description
getsuspect pulls down my suspect script and runs it, looking for malware or signs of compromise.
getsuspect writes the report to stdout.
getsuspect needs https access to Github. A proxy could be set in https_proxy shell variable.
Example
Run the function. There are no command line arguments.
$ getsuspect
Load the script file from Github via proxy.
$ https_proxy=http://proxy.example.com:8080
$ getsuspect