Virustotal

virustotal

VirusTotal is a free online service that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content using multiple antivirus engines and website scanners.

Security & Identity Tools Web del proveedor

Acciones

Triggers

Autenticación

—

OAuth gestionado

Información técnica: el detalle de parámetros, schemas y triggers de esta página está pensado para equipos de integración. Si solo necesitas saber si tu herramienta favorita está disponible, basta con ver la lista de acciones.

Acciones disponibles (16)

Cada acción es una operación que el agente puede ejecutar contra este conector. Haz clic en una acción para ver sus parámetros.

Add VirusTotal CommentVIRUSTOTAL_ADD_COMMENTAcción

Tool to add a comment to a virustotal resource (file, url, domain, or ip address). use after analyzing a resource to leave contextual feedback. provide exactly one identifier per call.

Parámetros de entrada

urlstring
URL resource identifier to comment on. Mutually exclusive with file, domain, and ip_address.
filestring
SHA-256 hash of the file to comment on. Mutually exclusive with url, domain, and ip_address.
textstringObligatorio
The comment text to add.
domainstring
Domain name to comment on. Mutually exclusive with file, url, and ip_address.
ip_addressstring
IP address to comment on. Mutually exclusive with file, url, and domain.

Parámetros de salida

dataobjectObligatorio
Created comment data.
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Add VoteVIRUSTOTAL_ADD_VOTEAcción

Tool to add a vote (harmless/malicious) to a virustotal resource. use after reviewing analysis results to submit your verdict.

Parámetros de entrada

dataobjectObligatorio

Parámetros de salida

dataobjectObligatorio
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get Analysis ReportVIRUSTOTAL_GET_ANALYSISAcción

Tool to retrieve the analysis report of a file or url submission. use after obtaining an analysis id to fetch its detailed report.

Parámetros de entrada

idstringObligatorio
The identifier of the analysis to retrieve

Parámetros de salida

dataobjectObligatorio
Analysis report data
metaobject
Additional metadata
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get commentsVIRUSTOTAL_GET_COMMENTSAcción

Tool to retrieve the latest comments on a virustotal resource. use when you need to review user-generated comments for a file, url, domain, or ip after obtaining its identifier.

Parámetros de entrada

sortstringenum
Sort order by comment date ('asc' or 'desc')
ascdesc
limitinteger
Number of comments to return per page (default: 10, max: 40)
cursorstring
Pagination cursor for fetching next page
filter[resource]stringObligatorio
Resource identifier to get comments for (SHA-256, URL, domain, or IP address)

Parámetros de salida

dataobject[]Obligatorio
List of comment objects
metaobjectObligatorio
Pagination information
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get Domain RelationshipsVIRUSTOTAL_GET_DOMAIN_RELATIONSHIPSAcción

Tool to retrieve relationship objects for a given domain. use when you have a domain and need to explore its related entities.

Parámetros de entrada

limitinteger
Number of items to return per page (1-40). Defaults to server default if omitted.
cursorstring
Pagination cursor for fetching next page of results.
domainstringObligatorio
The domain name to query (e.g., 'example.com').
relationshipstringObligatorioenum
Type of relationship to retrieve. Allowed values: communicating_files, referrer_files, downloaded_files, resolutions, subdomains, categories, whois, ssl_certificates, detected_downloaded_samples, detected_referrer_samples.
communicating_filesreferrer_filesdownloaded_filesresolutionssubdomainscategorieswhoisssl_certificatesdetected_downloaded_samplesdetected_referrer_samples

Parámetros de salida

dataobject[]Obligatorio
Array of related objects for the domain
metaobjectObligatorio
Metadata about the results, including count and cursor
errorstring
Error if any occurred during the execution of the action
linksobjectObligatorio
Pagination links for navigating through result pages
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get Domain ReportVIRUSTOTAL_GET_DOMAIN_REPORTAcción

Tool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.

Parámetros de entrada

domainstringObligatorio
The domain name to retrieve the report for (e.g., 'example.com')

Parámetros de salida

dataobjectObligatorio
Domain report data
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get File ReportVIRUSTOTAL_GET_FILE_REPORTAcción

Tool to retrieve the analysis report of a file. use when you have a file's hash and need detailed scan metadata.

Parámetros de entrada

idstringObligatorio
Unique file identifier (SHA-256, SHA-1, MD5 hash or scan_id)

Parámetros de salida

dataobjectObligatorio
File report data
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get IP Address RelationshipsVIRUSTOTAL_GET_IP_ADDRESS_RELATIONSHIPSAcción

Tool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.

Parámetros de entrada

ipstringObligatorio
The IPv4 or IPv6 address to query (e.g., '8.8.8.8').
limitinteger
Number of items to return per page (1-40). Defaults to server default if omitted.
cursorstring
Pagination cursor for fetching next page of results.
relationshipstringObligatorioenum
Type of relationship to retrieve. Allowed values: communicating_files, downloaded_files, communicating_urls.
communicating_filesdownloaded_filescommunicating_urls

Parámetros de salida

dataobject[]Obligatorio
Array of related objects for the IP address
metaobjectObligatorio
Metadata about the results, including count and cursor
errorstring
Error if any occurred during the execution of the action
linksobjectObligatorio
Pagination links for navigating through result pages
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get IP Address ReportVIRUSTOTAL_GET_IP_ADDRESS_REPORTAcción

Tool to retrieve the analysis report of an ip address. use when you need detailed insight on an ip's reputation, asn, country, and analysis stats.

Parámetros de entrada

ipstringObligatorio
The IP address to retrieve the report for (IPv4 or IPv6)

Parámetros de salida

dataobjectObligatorio
IP address report data
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get VirusTotal MetadataVIRUSTOTAL_GET_METADATAAcción

Tool to retrieve virustotal metadata. use when you need to list all available api endpoints with methods, summaries, and urls.

Parámetros de entrada

Sin parámetros.

Parámetros de salida

dataobjectObligatorio
Metadata response payload
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get URL ReportVIRUSTOTAL_GET_URL_REPORTAcción

Tool to retrieve the analysis report of a url. use when you have a url identifier (base64-url without padding) and need detailed scan results, reputation, and metadata.

Parámetros de entrada

idstringObligatorio
Base64 URL identifier (RFC 4648 without padding) of the URL

Parámetros de salida

dataobjectObligatorio
URL report data
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Get VotesVIRUSTOTAL_GET_VOTESAcción

Tool to retrieve votes on files, urls, domains, or ip addresses. use when you need to view community votes for a given object.

Parámetros de entrada

limitinteger
Maximum number of votes to retrieve (default: 10, max: 40).
cursorstring
Pagination cursor for fetching subsequent pages of results.
object_idstringObligatorio
Identifier of the object (e.g., file hash, URL-encoded URL, domain name, or IP address).
object_typestringObligatorioenum
Type of the object to retrieve votes for: 'files', 'urls', 'domains', or 'ip_addresses'.
filesurlsdomainsip_addresses

Parámetros de salida

dataobject[]Obligatorio
List of votes.
metaobject
Pagination metadata.
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Rescan FileVIRUSTOTAL_RESCAN_FILEAcción

Tool to re-analyze a previously submitted file. use when you need updated analysis results after an initial scan.

Parámetros de entrada

idstringObligatorio
Unique file identifier (SHA-256, SHA-1, or MD5 hash of the file) to re-analyze.

Parámetros de salida

dataobjectObligatorio
Analysis data returned after rescan.
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Scan URLVIRUSTOTAL_SCAN_URLAcción

Tool to submit a url for scanning. use when you have a url and need to submit it to virustotal to obtain an analysis id for later retrieval.

Parámetros de entrada

urlstringObligatorio
The URL to be analyzed.

Parámetros de salida

dataobjectObligatorio
Analysis data for the URL scan.
metaobjectObligatorio
Metadata about the scanned URL.
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Search VirusTotalVIRUSTOTAL_SEARCHAcción

Tool to search for objects in the virustotal database. use when locating files, urls, domains, ips, or comments matching a query. supports pagination with limit and cursor.

Parámetros de entrada

limitinteger
Maximum number of items to return (1-40). Defaults to 10 if not specified.
querystringObligatorio
Query string to search in the VirusTotal database. Can be a file hash, URL, domain, IP address, or an advanced search query.
cursorstring
Pagination cursor from a previous SEARCH response. Use to retrieve the next batch of results.

Parámetros de salida

dataobject[]Obligatorio
List of search result items.
metaobjectObligatorio
Pagination metadata including next cursor.
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not

Upload FileVIRUSTOTAL_UPLOAD_FILEAcción

Tool to upload a file for scanning. use when you have binary file content ready to submit for virustotal analysis.

Parámetros de entrada

fileanyObligatoriobinary
Binary content of the file to upload.
filenamestring
Optional filename to use for the uploaded file.

Parámetros de salida

dataobjectObligatorio
Analysis data returned after file upload.
errorstring
Error if any occurred during the execution of the action
successfulbooleanObligatorio
Whether or not the action execution was successful or not