Virustotal
virustotalVirusTotal is a free online service that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content using multiple antivirus engines and website scanners.
Acciones disponibles (16)
Cada acción es una operación que el agente puede ejecutar contra este conector. Haz clic en una acción para ver sus parámetros.
Add VirusTotal CommentVIRUSTOTAL_ADD_COMMENTAcciónTool to add a comment to a virustotal resource (file, url, domain, or ip address). use after analyzing a resource to leave contextual feedback. provide exactly one identifier per call.
VIRUSTOTAL_ADD_COMMENTAcciónTool to add a comment to a virustotal resource (file, url, domain, or ip address). use after analyzing a resource to leave contextual feedback. provide exactly one identifier per call.
Parámetros de entrada
urlstringURL resource identifier to comment on. Mutually exclusive with file, domain, and ip_address.
filestringSHA-256 hash of the file to comment on. Mutually exclusive with url, domain, and ip_address.
textstringObligatorioThe comment text to add.
domainstringDomain name to comment on. Mutually exclusive with file, url, and ip_address.
ip_addressstringIP address to comment on. Mutually exclusive with file, url, and domain.
Parámetros de salida
dataobjectObligatorioCreated comment data.
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Add VoteVIRUSTOTAL_ADD_VOTEAcciónTool to add a vote (harmless/malicious) to a virustotal resource. use after reviewing analysis results to submit your verdict.
VIRUSTOTAL_ADD_VOTEAcciónTool to add a vote (harmless/malicious) to a virustotal resource. use after reviewing analysis results to submit your verdict.
Parámetros de entrada
dataobjectObligatorio
Parámetros de salida
dataobjectObligatorioerrorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get Analysis ReportVIRUSTOTAL_GET_ANALYSISAcciónTool to retrieve the analysis report of a file or url submission. use after obtaining an analysis id to fetch its detailed report.
VIRUSTOTAL_GET_ANALYSISAcciónTool to retrieve the analysis report of a file or url submission. use after obtaining an analysis id to fetch its detailed report.
Parámetros de entrada
idstringObligatorioThe identifier of the analysis to retrieve
Parámetros de salida
dataobjectObligatorioAnalysis report data
metaobjectAdditional metadata
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get commentsVIRUSTOTAL_GET_COMMENTSAcciónTool to retrieve the latest comments on a virustotal resource. use when you need to review user-generated comments for a file, url, domain, or ip after obtaining its identifier.
VIRUSTOTAL_GET_COMMENTSAcciónTool to retrieve the latest comments on a virustotal resource. use when you need to review user-generated comments for a file, url, domain, or ip after obtaining its identifier.
Parámetros de entrada
sortstringenumSort order by comment date ('asc' or 'desc')
ascdesclimitintegerNumber of comments to return per page (default: 10, max: 40)
cursorstringPagination cursor for fetching next page
filter[resource]stringObligatorioResource identifier to get comments for (SHA-256, URL, domain, or IP address)
Parámetros de salida
dataobject[]ObligatorioList of comment objects
metaobjectObligatorioPagination information
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get Domain RelationshipsVIRUSTOTAL_GET_DOMAIN_RELATIONSHIPSAcciónTool to retrieve relationship objects for a given domain. use when you have a domain and need to explore its related entities.
VIRUSTOTAL_GET_DOMAIN_RELATIONSHIPSAcciónTool to retrieve relationship objects for a given domain. use when you have a domain and need to explore its related entities.
Parámetros de entrada
limitintegerNumber of items to return per page (1-40). Defaults to server default if omitted.
cursorstringPagination cursor for fetching next page of results.
domainstringObligatorioThe domain name to query (e.g., 'example.com').
relationshipstringObligatorioenumType of relationship to retrieve. Allowed values: communicating_files, referrer_files, downloaded_files, resolutions, subdomains, categories, whois, ssl_certificates, detected_downloaded_samples, detected_referrer_samples.
communicating_filesreferrer_filesdownloaded_filesresolutionssubdomainscategorieswhoisssl_certificatesdetected_downloaded_samplesdetected_referrer_samples
Parámetros de salida
dataobject[]ObligatorioArray of related objects for the domain
metaobjectObligatorioMetadata about the results, including count and cursor
errorstringError if any occurred during the execution of the action
linksobjectObligatorioPagination links for navigating through result pages
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get Domain ReportVIRUSTOTAL_GET_DOMAIN_REPORTAcciónTool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.
VIRUSTOTAL_GET_DOMAIN_REPORTAcciónTool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.
Parámetros de entrada
domainstringObligatorioThe domain name to retrieve the report for (e.g., 'example.com')
Parámetros de salida
dataobjectObligatorioDomain report data
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get File ReportVIRUSTOTAL_GET_FILE_REPORTAcciónTool to retrieve the analysis report of a file. use when you have a file's hash and need detailed scan metadata.
VIRUSTOTAL_GET_FILE_REPORTAcciónTool to retrieve the analysis report of a file. use when you have a file's hash and need detailed scan metadata.
Parámetros de entrada
idstringObligatorioUnique file identifier (SHA-256, SHA-1, MD5 hash or scan_id)
Parámetros de salida
dataobjectObligatorioFile report data
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get IP Address RelationshipsVIRUSTOTAL_GET_IP_ADDRESS_RELATIONSHIPSAcciónTool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.
VIRUSTOTAL_GET_IP_ADDRESS_RELATIONSHIPSAcciónTool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.
Parámetros de entrada
ipstringObligatorioThe IPv4 or IPv6 address to query (e.g., '8.8.8.8').
limitintegerNumber of items to return per page (1-40). Defaults to server default if omitted.
cursorstringPagination cursor for fetching next page of results.
relationshipstringObligatorioenumType of relationship to retrieve. Allowed values: communicating_files, downloaded_files, communicating_urls.
communicating_filesdownloaded_filescommunicating_urls
Parámetros de salida
dataobject[]ObligatorioArray of related objects for the IP address
metaobjectObligatorioMetadata about the results, including count and cursor
errorstringError if any occurred during the execution of the action
linksobjectObligatorioPagination links for navigating through result pages
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get IP Address ReportVIRUSTOTAL_GET_IP_ADDRESS_REPORTAcciónTool to retrieve the analysis report of an ip address. use when you need detailed insight on an ip's reputation, asn, country, and analysis stats.
VIRUSTOTAL_GET_IP_ADDRESS_REPORTAcciónTool to retrieve the analysis report of an ip address. use when you need detailed insight on an ip's reputation, asn, country, and analysis stats.
Parámetros de entrada
ipstringObligatorioThe IP address to retrieve the report for (IPv4 or IPv6)
Parámetros de salida
dataobjectObligatorioIP address report data
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get VirusTotal MetadataVIRUSTOTAL_GET_METADATAAcciónTool to retrieve virustotal metadata. use when you need to list all available api endpoints with methods, summaries, and urls.
VIRUSTOTAL_GET_METADATAAcciónTool to retrieve virustotal metadata. use when you need to list all available api endpoints with methods, summaries, and urls.
Parámetros de entrada
Sin parámetros.
Parámetros de salida
dataobjectObligatorioMetadata response payload
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get URL ReportVIRUSTOTAL_GET_URL_REPORTAcciónTool to retrieve the analysis report of a url. use when you have a url identifier (base64-url without padding) and need detailed scan results, reputation, and metadata.
VIRUSTOTAL_GET_URL_REPORTAcciónTool to retrieve the analysis report of a url. use when you have a url identifier (base64-url without padding) and need detailed scan results, reputation, and metadata.
Parámetros de entrada
idstringObligatorioBase64 URL identifier (RFC 4648 without padding) of the URL
Parámetros de salida
dataobjectObligatorioURL report data
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Get VotesVIRUSTOTAL_GET_VOTESAcciónTool to retrieve votes on files, urls, domains, or ip addresses. use when you need to view community votes for a given object.
VIRUSTOTAL_GET_VOTESAcciónTool to retrieve votes on files, urls, domains, or ip addresses. use when you need to view community votes for a given object.
Parámetros de entrada
limitintegerMaximum number of votes to retrieve (default: 10, max: 40).
cursorstringPagination cursor for fetching subsequent pages of results.
object_idstringObligatorioIdentifier of the object (e.g., file hash, URL-encoded URL, domain name, or IP address).
object_typestringObligatorioenumType of the object to retrieve votes for: 'files', 'urls', 'domains', or 'ip_addresses'.
filesurlsdomainsip_addresses
Parámetros de salida
dataobject[]ObligatorioList of votes.
metaobjectPagination metadata.
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Rescan FileVIRUSTOTAL_RESCAN_FILEAcciónTool to re-analyze a previously submitted file. use when you need updated analysis results after an initial scan.
VIRUSTOTAL_RESCAN_FILEAcciónTool to re-analyze a previously submitted file. use when you need updated analysis results after an initial scan.
Parámetros de entrada
idstringObligatorioUnique file identifier (SHA-256, SHA-1, or MD5 hash of the file) to re-analyze.
Parámetros de salida
dataobjectObligatorioAnalysis data returned after rescan.
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Scan URLVIRUSTOTAL_SCAN_URLAcciónTool to submit a url for scanning. use when you have a url and need to submit it to virustotal to obtain an analysis id for later retrieval.
VIRUSTOTAL_SCAN_URLAcciónTool to submit a url for scanning. use when you have a url and need to submit it to virustotal to obtain an analysis id for later retrieval.
Parámetros de entrada
urlstringObligatorioThe URL to be analyzed.
Parámetros de salida
dataobjectObligatorioAnalysis data for the URL scan.
metaobjectObligatorioMetadata about the scanned URL.
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Search VirusTotalVIRUSTOTAL_SEARCHAcciónTool to search for objects in the virustotal database. use when locating files, urls, domains, ips, or comments matching a query. supports pagination with limit and cursor.
VIRUSTOTAL_SEARCHAcciónTool to search for objects in the virustotal database. use when locating files, urls, domains, ips, or comments matching a query. supports pagination with limit and cursor.
Parámetros de entrada
limitintegerMaximum number of items to return (1-40). Defaults to 10 if not specified.
querystringObligatorioQuery string to search in the VirusTotal database. Can be a file hash, URL, domain, IP address, or an advanced search query.
cursorstringPagination cursor from a previous SEARCH response. Use to retrieve the next batch of results.
Parámetros de salida
dataobject[]ObligatorioList of search result items.
metaobjectObligatorioPagination metadata including next cursor.
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not
Upload FileVIRUSTOTAL_UPLOAD_FILEAcciónTool to upload a file for scanning. use when you have binary file content ready to submit for virustotal analysis.
VIRUSTOTAL_UPLOAD_FILEAcciónTool to upload a file for scanning. use when you have binary file content ready to submit for virustotal analysis.
Parámetros de entrada
fileanyObligatoriobinaryBinary content of the file to upload.
filenamestringOptional filename to use for the uploaded file.
Parámetros de salida
dataobjectObligatorioAnalysis data returned after file upload.
errorstringError if any occurred during the execution of the action
successfulbooleanObligatorioWhether or not the action execution was successful or not