[GH-ISSUE #1161] Antivirus addon #715

Open
opened 2026-03-02 02:18:29 +03:00 by kerem · 6 comments
Owner

Originally created by @GijsVK94 on GitHub (Jun 1, 2022).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1161

i know there is a oppertiunity to deploy endpoint antivirus software but this is still managed in a different dashboard.
to keep everything in one place it would be great to see another icon in the dashboard of TRRM for the virusscanner

Originally created by @GijsVK94 on GitHub (Jun 1, 2022). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1161 i know there is a oppertiunity to deploy endpoint antivirus software but this is still managed in a different dashboard. to keep everything in one place it would be great to see another icon in the dashboard of TRRM for the virusscanner
Author
Owner

@silversword411 commented on GitHub (Jun 2, 2022):

What av? You mean just query windows security center to see it's opinion?

<!-- gh-comment-id:1144327940 --> @silversword411 commented on GitHub (Jun 2, 2022): What av? You mean just query windows security center to see it's opinion?
Author
Owner

@GijsVK94 commented on GitHub (Jun 9, 2022):

to deploy something like bitdefender.
what i mean is that if i install the trrm agent on a system the endpoint av will be installed automaticaly.
when this is done a icon will be seen (like the Patching pending, pending action, reboot icons) so we also see the notification in the trrm dashboard and not in a different dashboard like gravity zone

<!-- gh-comment-id:1150836964 --> @GijsVK94 commented on GitHub (Jun 9, 2022): to deploy something like bitdefender. what i mean is that if i install the trrm agent on a system the endpoint av will be installed automaticaly. when this is done a icon will be seen (like the Patching pending, pending action, reboot icons) so we also see the notification in the trrm dashboard and not in a different dashboard like gravity zone
Author
Owner

@silversword411 commented on GitHub (Jun 9, 2022):

With 50+ av products out in the market there's not a lot TRMM is going to be able to do to support everything.

You can deploy whatever you want now (including av) using the existing scripting capabilities in TRMM

Integration of additional indicators for agents (av or otherwise) will probably be part of whatever https://github.com/amidaware/tacticalrmm/issues/653

tagging system gets implemented.

I can foresee at some point in the future maybe some official av integration with one or several av vendors possibly as part of an extension process similar to other RMM systems.

I'm tempted to close this issue as it's kind of many issues in one, but will leave open for now and let devs decide.

<!-- gh-comment-id:1151026825 --> @silversword411 commented on GitHub (Jun 9, 2022): With 50+ av products out in the market there's not a lot TRMM is going to be able to do to support everything. You can deploy whatever you want now (including av) using the existing scripting capabilities in TRMM Integration of additional indicators for agents (av or otherwise) will probably be part of whatever https://github.com/amidaware/tacticalrmm/issues/653 tagging system gets implemented. I can foresee at some point in the future maybe some official av integration with one or several av vendors possibly as part of an extension process similar to other RMM systems. I'm tempted to close this issue as it's kind of many issues in one, but will leave open for now and let devs decide.
Author
Owner

@Sander-VdB commented on GitHub (Jun 13, 2022):

As an end-user this got me thinking: it would be a nice feature but as TacticalRMM is build around scripts you can kinda get this functionality already:

  • create a check to see if the antivirus software is installed
  • create a task that installs the antivirus if it is not installed based on previous check
  • create a check to see if a virus has been found (or antivirus outdated,not running,...)
  • create an alert if a virus was found
  • put this all in an automation policy and assign to a client so all devices for that client get it and install the antivirus automatically

That is just missing the nice icon from your request. What would still be nice but might become too cluttered for me. I just respond to alerts or when the general task icon changes color

<!-- gh-comment-id:1154353258 --> @Sander-VdB commented on GitHub (Jun 13, 2022): As an end-user this got me thinking: it would be a nice feature but as TacticalRMM is build around scripts you can kinda get this functionality already: - create a check to see if the antivirus software is installed - create a task that installs the antivirus if it is not installed based on previous check - create a check to see if a virus has been found (or antivirus outdated,not running,...) - create an alert if a virus was found - put this all in an automation policy and assign to a client so all devices for that client get it and install the antivirus automatically That is just missing the nice icon from your request. What would still be nice but might become too cluttered for me. I just respond to alerts or when the general task icon changes color
Author
Owner

@joeldeteves commented on GitHub (Aug 10, 2022):

I think what the poster is referring to is the AV integration that exists in major RMM products like Kaseya and Labtec:

  • Sophos
  • ESET
  • Microsoft
  • BitDefender (yuck)
  • etc

It's not necessary, sure, but It might expand the interest in TRMM to a wider audience if there was integration with the usual suspects.

@wh1te909: I would certainly consider paying for this as an optional "premium" feature similar to Code Signed agents.

<!-- gh-comment-id:1211024363 --> @joeldeteves commented on GitHub (Aug 10, 2022): I think what the poster is referring to is the AV integration that exists in major RMM products like Kaseya and Labtec: - Sophos - ESET - Microsoft - BitDefender (yuck) - etc It's not necessary, sure, but It might expand the interest in TRMM to a wider audience if there was integration with the usual suspects. @wh1te909: I would certainly consider paying for this as an optional "premium" feature similar to Code Signed agents.
Author
Owner

@silversword411 commented on GitHub (Aug 10, 2022):

Yes, I'm sure this will be a long term extension/monetization mechanism :)

<!-- gh-comment-id:1211059949 --> @silversword411 commented on GitHub (Aug 10, 2022): Yes, I'm sure this will be a long term extension/monetization mechanism :)
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/tacticalrmm#715
No description provided.