VirusTotal

VirusTotal integration (Security, Data). Imported from open-connector.

API key14 toolshttps://www.virustotal.com/api/v3

GET

virustotal_search

Search files, URLs, domains, IPs, and other objects in VirusTotal.

/search

3 parameters

Param	Type	Required	Description
query	string	required	Search query accepted by VirusTotal.
limit	integer	optional	Maximum number of results to return.
cursor	string	optional	Pagination cursor returned by a previous response.

GET

virustotal_get_metadata

Retrieve VirusTotal metadata, including available privileges, engines, and relationship names.

/metadata

GET

virustotal_get_analysis

Retrieve a VirusTotal analysis object by analysis ID.

/analyses/{analysisId}

1 parameter

Param	Type	Required	Description
analysisId	string	required	Identifier of the analysis to retrieve.

GET

virustotal_get_file_report

Retrieve the latest VirusTotal report for a file identifier.

/files/{fileId}

1 parameter

Param	Type	Required	Description
fileId	string	required	File identifier such as a SHA-256, SHA-1, or MD5 hash.

POST

virustotal_upload_file

Upload a file to VirusTotal for analysis, automatically using the large-file upload URL when needed.

/files/upload_url

3 parameters

Param	Type	Required	Description
contentBase64	string	required	Base64-encoded file bytes to upload for analysis.
fileName	string	optional	Filename to associate with the uploaded file.
password	string	optional	Password used to unpack a protected ZIP before analysis.

POST

virustotal_rescan_file

Request a fresh VirusTotal analysis for a previously submitted file.

/files/{fileId}/analyse

1 parameter

Param	Type	Required	Description
fileId	string	required	Identifier of the file to re-analyze.

POST

virustotal_scan_url

Submit a URL to VirusTotal for analysis.

/urls

1 parameter

Param	Type	Required	Description
url	string	optional	Raw URL to submit for analysis.

GET

virustotal_get_url_report

Retrieve the latest VirusTotal report for a URL using either a raw URL or a VirusTotal URL identifier.

/urls/{urlId}

2 parameters

Param	Type	Required	Description
url	string	optional	Raw URL string that will be converted into a VirusTotal URL identifier.
urlId	string	required	VirusTotal URL identifier encoded as unpadded base64url.

GET

virustotal_get_domain_report

Retrieve the latest VirusTotal report for a domain.

/domains/{domain}

1 parameter

Param	Type	Required	Description
domain	string	required	Domain name to retrieve.

GET

virustotal_get_domain_relationships

Retrieve related VirusTotal objects for a domain, with an option to request descriptors only.

/relationships/{relationship}

5 parameters

Param	Type	Required	Description
domain	string	required	Domain name whose related objects should be retrieved.
relationship	string	required	Relationship name documented by VirusTotal for the target object type.
limit	integer	optional	Maximum number of results to return.
cursor	string	optional	Pagination cursor returned by a previous response.
descriptorsOnly	boolean	optional	Whether to return relationship descriptors instead of complete related objects.

GET

virustotal_get_ip_address_report

Retrieve the latest VirusTotal report for an IP address.

/ip_addresses/{ipAddress}

1 parameter

Param	Type	Required	Description
ipAddress	string	required	IPv4 or IPv6 address to retrieve.

GET

virustotal_get_ip_address_relationships

Retrieve related VirusTotal objects for an IP address, with an option to request descriptors only.

/relationships/{relationship}

5 parameters

Param	Type	Required	Description
ipAddress	string	required	IPv4 or IPv6 address whose related objects should be retrieved.
relationship	string	required	Relationship name documented by VirusTotal for the target object type.
limit	integer	optional	Maximum number of results to return.
cursor	string	optional	Pagination cursor returned by a previous response.
descriptorsOnly	boolean	optional	Whether to return relationship descriptors instead of complete related objects.

POST

virustotal_add_comment

Add a community comment to a file, URL, domain, or IP address in VirusTotal.

/ip_addresses/{ipAddress}

6 parameters

Param	Type	Required	Description
fileId	string	optional	File identifier such as a SHA-256 hash.
url	string	optional	Raw URL string that will be converted into a VirusTotal URL identifier.
urlId	string	optional	VirusTotal URL identifier encoded as unpadded base64url.
domain	string	optional	Domain name to target.
ipAddress	string	required	IPv4 or IPv6 address to target.
text	string	required	Comment text to submit for the resource.

POST

virustotal_add_vote

Submit a harmless or malicious vote for a VirusTotal file, URL, domain, or IP.

/ip_addresses/{ipAddress}

6 parameters

Param	Type	Required	Description
fileId	string	optional	File identifier such as a SHA-256 hash.
url	string	optional	Raw URL string that will be converted into a VirusTotal URL identifier.
urlId	string	optional	VirusTotal URL identifier encoded as unpadded base64url.
domain	string	optional	Domain name to target.
ipAddress	string	required	IPv4 or IPv6 address to target.
verdict	string	required	Verdict to submit for the resource.