VirusTotal
This document explains how to set up the VirusTotal premium intelligence source in the TruSTAR platform.
VirusTotal inspects items with over 70 antivirus scanners and URL/domain blacklisting services, in addition to a myriad of tools to extract observables from those items.
- Source Type: Premium Intel
- Update Type: Query-based
- Parser: Yes
- Time to Install: 10 minutes
Observables Supported
- IP
- IP4
- URL
Requirements
- Membership in the VirusTotal community
- VirusTotal API Key
Getting Started
- Log into the TruSTAR Web App.
- Click the Marketplace icon on the left side icon list.
- Choose Premium Intel.
- Click Subscribe on the VirusTotal box.
- Enter your VirusTotal API key and click Save Credentials & Request Subscription.
TruSTAR will validate the integration within 48 hours and send an email when the integration has been enabled.
Known Issues
No reported issues.