malware for file hash endpoint

Author: hrbrmstr

NAMESPACE

@@ -4,6 +4,7 @@ export(xforce_as_networks)
 export(xforce_ip_history)
 export(xforce_ip_malware)
 export(xforce_ip_report)
+export(xforce_malware_for_hash)
 export(xforce_resolve)
 export(xforce_url_malware)
 export(xforce_url_report)

R/malware-hash.R

@@ -0,0 +1,35 @@
+#' Get Malware for File Hash
+#'
+#' @md
+#' @param hash file hash
+#' @param api_key,api_password IBM X-Force API Key & Password. All `xforce`
+#'        API functions will look for these in the `XFORCE_API_KEY` and
+#'        `XFORCE_API_PASSWORD` environment variables. You can store these
+#'        in `~/.Renviron` and you can obtain them
+#'        [on the IBM X-Force Portal](api_key=Sys.getenv("XFORCE_API_KEY")).
+#' @export
+#' @examples \donrun{
+#' xforce_ip_history("174.62.167.97")
+#' }
+xforce_malware_for_hash <- function(hash, api_key=Sys.getenv("XFORCE_API_KEY"),
+                                    api_password=Sys.getenv("XFORCE_API_PASSWORD")) {
+
+  httr::GET(
+    url = sprintf("https://api.xforce.ibmcloud.com/malware/%s", hash),
+    httr::accept_json(),
+    httr::user_agent("R xforce package (https://github.com/hrbrmstr/xforce"),
+    httr::authenticate(
+      user = api_key,
+      password = api_password
+    )
+  ) -> res
+
+  httr::stop_for_status(res)
+
+  out <- httr::content(res, as = "text")
+
+  out <- jsonlite::fromJSON(out)
+
+  out
+
+}

README.Rmd

@@ -21,6 +21,7 @@ The following functions are implemented:
 - `xforce_ip_history`:	Get IP History
 - `xforce_ip_malware`:	Get Malware Associated with the IP
 - `xforce_ip_report`:	Get IP Report
+- `xforce_malware_for_hash`:	Get Malware for File Hash
 - `xforce_resolve`:	Get DNS Records
 - `xforce_url_malware`:	Get Malware for URL
 - `xforce_url_report`:	Get URL Report

README.md

@@ -24,6 +24,7 @@ The following functions are implemented:
   - `xforce_ip_history`: Get IP History
   - `xforce_ip_malware`: Get Malware Associated with the IP
   - `xforce_ip_report`: Get IP Report
+  - `xforce_malware_for_hash`: Get Malware for File Hash
   - `xforce_resolve`: Get DNS Records
   - `xforce_url_malware`: Get Malware for URL
   - `xforce_url_report`: Get URL Report