Removing a malicious file with active response

#!/usr/bin/python3
# Wazuh - Custom Active Response script (5.x compliant, stateless)
# This program is free software; you can redistribute it
# and/or modify it under the terms of the GNU General Public
# License (version 2) as published by the FSF - Free Software
# Foundation.

import os
import sys
import json
import datetime
from pathlib import PureWindowsPath, PurePosixPath
import platform

LOG_FILE = "C:\\Program Files (x86)\\ossec-agent\\active-response\\active-responses.log"

OS_SUCCESS = 0
OS_INVALID = -1


def write_debug_file(ar_name, msg):
    with open(LOG_FILE, mode="a") as log_file:
        ar_name_posix = str(PurePosixPath(PureWindowsPath(ar_name[ar_name.find("active-response"):])))
        log_file.write(str(datetime.datetime.now().strftime('%Y/%m/%d %H:%M:%S')) + " " + ar_name_posix + ": " + msg + "\n")


def main(argv):

    write_debug_file(argv[0], "Started")

    # get alert from stdin
    input_str = ""
    for line in sys.stdin:
        input_str = line
        break

    write_debug_file(argv[0], input_str)

    try:
        data = json.loads(input_str)
    except ValueError:
        write_debug_file(argv[0], "Decoding JSON has failed, invalid input format")
        sys.exit(OS_INVALID)

    command = data.get("command")

    # Stateless AR only ever receives "enable" - guard anyway
    if command != "enable":
        write_debug_file(argv[0], "Command is not 'enable' (got: " + str(command) + "), nothing to do")
        sys.exit(OS_SUCCESS)

    file_path = data.get("file", {}).get("path")

    if not file_path:
        write_debug_file(argv[0], "No file.path present in the active response payload")
        sys.exit(OS_INVALID)

    write_debug_file(argv[0], "Removing file: " + file_path)

    try:
        os.remove(file_path)
        write_debug_file(argv[0], "Removed file: " + file_path)
    except FileNotFoundError:
        write_debug_file(argv[0], "File not found, nothing to remove: " + file_path)
    except PermissionError:
        write_debug_file(argv[0], "Permission denied removing file: " + file_path)
        sys.exit(OS_INVALID)
    except OSError as e:
        write_debug_file(argv[0], "Failed to remove file " + file_path + ": " + str(e))
        sys.exit(OS_INVALID)

    write_debug_file(argv[0], "Ended")

    sys.exit(OS_SUCCESS)


if __name__ == "__main__":
    main(sys.argv)