Skip to main content
VirusTotal v3 app icon

VirusTotal v3

This app integrates with the VirusTotal cloud to implement investigative and reputation actions using v3 APIsBuilt by Splunk LLC
soar product badge
Default Version 1.2.7

September 17, 2021

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#2 in Reputation

This app integrates with the VirusTotal cloud to implement investigative and reputation actions using v3 APIs

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • domain reputation: Queries VirusTotal for domain info
  • file reputation: Queries VirusTotal for file reputation info
  • get file: Downloads a file from VirusTotal, and adds it to the vault
  • ip reputation: Queries VirusTotal for IP info
  • url reputation: Queries VirusTotal for URL info
  • detonate url: Load a URL to Virus Total and retrieve analysis results
  • detonate file: Upload a file to Virus Total and retrieve the analysis results
  • get report: Get the results using the scan id from a detonate file or detonate url action