XMAN Replicator

Path: /opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/rpc/schema/

Name	Size	Rights	Date	Actions
[.]	<DIR>	drwxr-xr-x	2026-06-08 20:24	🔄 🗑️ 🗑️📁 ⬇️ 🔒
[..]	<DIR>	drwxr-xr-x	2026-06-08 20:24	🔄 🗑️ 🗑️📁 ⬇️ 🔒
history.pickle	1,079 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
history.yaml	1,195 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
ignore.pickle	2,471 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
ignore.yaml	2,808 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
imunify-patch-subscriptions.pickle	177 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
imunify-patch-subscriptions.yaml	159 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
malicious.pickle	5,544 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
malicious.yaml	6,880 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
malware-rebuild-patterns.pickle	270 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
malware-rebuild-patterns.yaml	261 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
malware-rescan-files.pickle	183 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
malware-rescan-files.yaml	181 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
malware-send-files.pickle	236 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
malware-send-files.yaml	244 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
on-demand-queue.pickle	2,255 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
on-demand-queue.yaml	2,631 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
on-demand-user.pickle	1,521 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
on-demand-user.yaml	1,629 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
on-demand.pickle	3,216 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
on-demand.yaml	3,650 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
read.pickle	482 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
read.yaml	526 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
submit.pickle	802 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
submit.yaml	915 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
user.pickle	1,745 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
user.yaml	1,979 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒
vulnerabilities.pickle	2,775 B	-rw-r--r--	2026-05-26 21:33	✏️ 🔄 🗑️ ⬇️ 🔒
vulnerabilities.yaml	3,162 B	-rw-r--r--	2026-05-26 21:29	✏️ 🔄 🗑️ ⬇️ 🔒

View: on-demand-queue.yaml

malware on-demand queue put:
  type: dict
  help: Queue on-demand scans for the selected paths
  return_type: NullAgentResponse
  cli:
    users:
      - root
  schema:
    paths:
      type: list
      schema:
        type: string
      required: true
      positional: true
      help: Paths to add to the queue

    prioritize:
      type: boolean
      default: false
      help: Put the scans on top of the queue

    detect_elf:
      type: boolean
      default: false
      help: Treat ELF binaries in home directories as malware.

    file_mask:
      type: string
      nullable: true
      help: |
        Several patterns can be added with ", " delimiter.
        Example: `*.js, *.php`

    ignore_mask:
      type: string
      nullable: true
      help: |
        Several patterns can be added with ", " delimiter.
        Example: `*.log, *.tmp`

    intensity:
      type: string
      nullable: true
      allowed:
        - low
        - moderate
        - high
      help: |
        Scan intensity, simplified.
        Overrides `intensity_cpu`, `intensity_io` and `intensity_ram`.

    intensity_cpu:
      type: integer
      coerce: int
      nullable: true
      min: 1
      max: 7
      help: |
        CPU usage allowed for the scan - from minimal, to 1 cpu core.
        The method depends on the system: lve, cgroups, nice.
        The default value can be configured in `MALWARE_SCAN_INTENSITY.cpu` config option.

    intensity_io:
      type: integer
      coerce: int
      nullable: true
      min: 1
      max: 7
      help: |
        Disk usage allowed for the scan.
        The default value can be configured in `MALWARE_SCAN_INTENSITY.io` config option.

    intensity_ram:
      type: integer
      coerce: int
      nullable: true
      min: 1024
      help: |
        RAM usage allowed for the scan, in MB.
        The default value can be configured in `MALWARE_SCAN_INTENSITY.ram` config option.

    follow_symlinks:
      type: boolean
      default: false
      help: If true, the scanner may traverse outside of the initial directory.

    scan_file:
      type: boolean
      default: true
      help: Scan files in set path.

    scan_db:
      type: boolean
      default: null
      coerce: scan_db
      help: Scan databases of applications found in set path.

malware on-demand queue remove:
  return_type: NullAgentResponse
  help: Remove on-demand scans from the queue
  cli:
    users:
      - root
  schema:
    scan_ids:
      type: list
      schema:
        type: string
      required: false
      positional: true
      help: IDs obtained via `malware on-demand list`

🛸 XMAN Replicator

View: on-demand-queue.yaml

PHP Console

SQL Console