MalwareMultiScan/MalwareMultiScan.Backends/Backends/Implementations/SophosScanBackend.cs

using System;
using System.IO;
using System.Text.RegularExpressions;
using MalwareMultiScan.Backends.Backends.Abstracts;
using Microsoft.Extensions.Logging;

namespace MalwareMultiScan.Backends.Backends.Implementations
{
    public class SophosScanBackend : AbstractLocalProcessScanBackend
    {
        public SophosScanBackend(ILogger logger) : base(logger)
        {
        }

        public override string Id { get; } = "sophos";

        public override DateTime DatabaseLastUpdate =>
            File.GetLastWriteTime("/opt/sophos-av/lib/sav/vdlsync.upd");

        protected override string BackendPath { get; } = "/opt/sophos-av/bin/savscan";

        protected override bool ThrowOnNonZeroExitCode { get; } = false;

        protected override Regex MatchRegex { get; } =
            new Regex(@">>> Virus '(?<threat>.*)' found in file .*", RegexOptions.Compiled | RegexOptions.Multiline);

        protected override string GetBackendArguments(string path)
        {
            return $"-f -archive -ss {path}";
        }
    }
}