NAiOS IconNAiOS Logo
Volver al catálogo

Virustotal

virustotal

VirusTotal is a free online service that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content using multiple antivirus engines and website scanners.

Acciones
16
Triggers
0
Autenticación
OAuth gestionado
No
Información técnica: el detalle de parámetros, schemas y triggers de esta página está pensado para equipos de integración. Si solo necesitas saber si tu herramienta favorita está disponible, basta con ver la lista de acciones.

Acciones disponibles (16)

Cada acción es una operación que el agente puede ejecutar contra este conector. Haz clic en una acción para ver sus parámetros.

Add VirusTotal CommentVIRUSTOTAL_ADD_COMMENTAcción

Tool to add a comment to a virustotal resource (file, url, domain, or ip address). use after analyzing a resource to leave contextual feedback. provide exactly one identifier per call.

Parámetros de entrada

  • urlstring

    URL resource identifier to comment on. Mutually exclusive with file, domain, and ip_address.

  • filestring

    SHA-256 hash of the file to comment on. Mutually exclusive with url, domain, and ip_address.

  • textstringObligatorio

    The comment text to add.

  • domainstring

    Domain name to comment on. Mutually exclusive with file, url, and ip_address.

  • ip_addressstring

    IP address to comment on. Mutually exclusive with file, url, and domain.

Parámetros de salida

  • dataobjectObligatorio

    Created comment data.

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Add VoteVIRUSTOTAL_ADD_VOTEAcción

Tool to add a vote (harmless/malicious) to a virustotal resource. use after reviewing analysis results to submit your verdict.

Parámetros de entrada

  • dataobjectObligatorio

Parámetros de salida

  • dataobjectObligatorio
  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get Analysis ReportVIRUSTOTAL_GET_ANALYSISAcción

Tool to retrieve the analysis report of a file or url submission. use after obtaining an analysis id to fetch its detailed report.

Parámetros de entrada

  • idstringObligatorio

    The identifier of the analysis to retrieve

Parámetros de salida

  • dataobjectObligatorio

    Analysis report data

  • metaobject

    Additional metadata

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get commentsVIRUSTOTAL_GET_COMMENTSAcción

Tool to retrieve the latest comments on a virustotal resource. use when you need to review user-generated comments for a file, url, domain, or ip after obtaining its identifier.

Parámetros de entrada

  • sortstringenum

    Sort order by comment date ('asc' or 'desc')

    ascdesc
  • limitinteger

    Number of comments to return per page (default: 10, max: 40)

  • cursorstring

    Pagination cursor for fetching next page

  • filter[resource]stringObligatorio

    Resource identifier to get comments for (SHA-256, URL, domain, or IP address)

Parámetros de salida

  • dataobject[]Obligatorio

    List of comment objects

  • metaobjectObligatorio

    Pagination information

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get Domain RelationshipsVIRUSTOTAL_GET_DOMAIN_RELATIONSHIPSAcción

Tool to retrieve relationship objects for a given domain. use when you have a domain and need to explore its related entities.

Parámetros de entrada

  • limitinteger

    Number of items to return per page (1-40). Defaults to server default if omitted.

  • cursorstring

    Pagination cursor for fetching next page of results.

  • domainstringObligatorio

    The domain name to query (e.g., 'example.com').

  • relationshipstringObligatorioenum

    Type of relationship to retrieve. Allowed values: communicating_files, referrer_files, downloaded_files, resolutions, subdomains, categories, whois, ssl_certificates, detected_downloaded_samples, detected_referrer_samples.

    communicating_filesreferrer_filesdownloaded_filesresolutionssubdomainscategorieswhoisssl_certificatesdetected_downloaded_samplesdetected_referrer_samples

Parámetros de salida

  • dataobject[]Obligatorio

    Array of related objects for the domain

  • metaobjectObligatorio

    Metadata about the results, including count and cursor

  • errorstring

    Error if any occurred during the execution of the action

  • linksobjectObligatorio

    Pagination links for navigating through result pages

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get Domain ReportVIRUSTOTAL_GET_DOMAIN_REPORTAcción

Tool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.

Parámetros de entrada

  • domainstringObligatorio

    The domain name to retrieve the report for (e.g., 'example.com')

Parámetros de salida

  • dataobjectObligatorio

    Domain report data

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get File ReportVIRUSTOTAL_GET_FILE_REPORTAcción

Tool to retrieve the analysis report of a file. use when you have a file's hash and need detailed scan metadata.

Parámetros de entrada

  • idstringObligatorio

    Unique file identifier (SHA-256, SHA-1, MD5 hash or scan_id)

Parámetros de salida

  • dataobjectObligatorio

    File report data

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get IP Address RelationshipsVIRUSTOTAL_GET_IP_ADDRESS_RELATIONSHIPSAcción

Tool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.

Parámetros de entrada

  • ipstringObligatorio

    The IPv4 or IPv6 address to query (e.g., '8.8.8.8').

  • limitinteger

    Number of items to return per page (1-40). Defaults to server default if omitted.

  • cursorstring

    Pagination cursor for fetching next page of results.

  • relationshipstringObligatorioenum

    Type of relationship to retrieve. Allowed values: communicating_files, downloaded_files, communicating_urls.

    communicating_filesdownloaded_filescommunicating_urls

Parámetros de salida

  • dataobject[]Obligatorio

    Array of related objects for the IP address

  • metaobjectObligatorio

    Metadata about the results, including count and cursor

  • errorstring

    Error if any occurred during the execution of the action

  • linksobjectObligatorio

    Pagination links for navigating through result pages

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get IP Address ReportVIRUSTOTAL_GET_IP_ADDRESS_REPORTAcción

Tool to retrieve the analysis report of an ip address. use when you need detailed insight on an ip's reputation, asn, country, and analysis stats.

Parámetros de entrada

  • ipstringObligatorio

    The IP address to retrieve the report for (IPv4 or IPv6)

Parámetros de salida

  • dataobjectObligatorio

    IP address report data

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get VirusTotal MetadataVIRUSTOTAL_GET_METADATAAcción

Tool to retrieve virustotal metadata. use when you need to list all available api endpoints with methods, summaries, and urls.

Parámetros de entrada

Sin parámetros.

Parámetros de salida

  • dataobjectObligatorio

    Metadata response payload

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get URL ReportVIRUSTOTAL_GET_URL_REPORTAcción

Tool to retrieve the analysis report of a url. use when you have a url identifier (base64-url without padding) and need detailed scan results, reputation, and metadata.

Parámetros de entrada

  • idstringObligatorio

    Base64 URL identifier (RFC 4648 without padding) of the URL

Parámetros de salida

  • dataobjectObligatorio

    URL report data

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Get VotesVIRUSTOTAL_GET_VOTESAcción

Tool to retrieve votes on files, urls, domains, or ip addresses. use when you need to view community votes for a given object.

Parámetros de entrada

  • limitinteger

    Maximum number of votes to retrieve (default: 10, max: 40).

  • cursorstring

    Pagination cursor for fetching subsequent pages of results.

  • object_idstringObligatorio

    Identifier of the object (e.g., file hash, URL-encoded URL, domain name, or IP address).

  • object_typestringObligatorioenum

    Type of the object to retrieve votes for: 'files', 'urls', 'domains', or 'ip_addresses'.

    filesurlsdomainsip_addresses

Parámetros de salida

  • dataobject[]Obligatorio

    List of votes.

  • metaobject

    Pagination metadata.

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Rescan FileVIRUSTOTAL_RESCAN_FILEAcción

Tool to re-analyze a previously submitted file. use when you need updated analysis results after an initial scan.

Parámetros de entrada

  • idstringObligatorio

    Unique file identifier (SHA-256, SHA-1, or MD5 hash of the file) to re-analyze.

Parámetros de salida

  • dataobjectObligatorio

    Analysis data returned after rescan.

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Scan URLVIRUSTOTAL_SCAN_URLAcción

Tool to submit a url for scanning. use when you have a url and need to submit it to virustotal to obtain an analysis id for later retrieval.

Parámetros de entrada

  • urlstringObligatorio

    The URL to be analyzed.

Parámetros de salida

  • dataobjectObligatorio

    Analysis data for the URL scan.

  • metaobjectObligatorio

    Metadata about the scanned URL.

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Search VirusTotalVIRUSTOTAL_SEARCHAcción

Tool to search for objects in the virustotal database. use when locating files, urls, domains, ips, or comments matching a query. supports pagination with limit and cursor.

Parámetros de entrada

  • limitinteger

    Maximum number of items to return (1-40). Defaults to 10 if not specified.

  • querystringObligatorio

    Query string to search in the VirusTotal database. Can be a file hash, URL, domain, IP address, or an advanced search query.

  • cursorstring

    Pagination cursor from a previous SEARCH response. Use to retrieve the next batch of results.

Parámetros de salida

  • dataobject[]Obligatorio

    List of search result items.

  • metaobjectObligatorio

    Pagination metadata including next cursor.

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not

Upload FileVIRUSTOTAL_UPLOAD_FILEAcción

Tool to upload a file for scanning. use when you have binary file content ready to submit for virustotal analysis.

Parámetros de entrada

  • fileanyObligatoriobinary

    Binary content of the file to upload.

  • filenamestring

    Optional filename to use for the uploaded file.

Parámetros de salida

  • dataobjectObligatorio

    Analysis data returned after file upload.

  • errorstring

    Error if any occurred during the execution of the action

  • successfulbooleanObligatorio

    Whether or not the action execution was successful or not