From fbb36147846ece8bf04335a7a12e0b6ed039c922 Mon Sep 17 00:00:00 2001
From: Michel Oosterhof <michel@oosterhof.net>
Date: Tue, 5 Jan 2016 20:17:52 +0000
Subject: [PATCH] also send SFTP uploaded files

---
 cowrie/output/virustotal.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/cowrie/output/virustotal.py b/cowrie/output/virustotal.py
index f1405dd..52dab0d 100644
--- a/cowrie/output/virustotal.py
+++ b/cowrie/output/virustotal.py
@@ -89,6 +89,10 @@ class Output(cowrie.core.output.Output):
                     fileName = b
             self.postfile(entry["outfile"], fileName)
 
+        elif entry["eventid"] == 'COW0017':
+            log.msg("Sending file to VT")
+            self.postfile(entry["outfile"], entry["filename"])
+
 
     def postfile(self, artifact, fileName):
         """