misp-modules/doc/expansion/virustotal_public.json

{
    "description": "Module to get information from VirusTotal.",
    "logo": "logos/virustotal.png",
    "requirements": ["An access to the VirusTotal API (apikey)"],
    "input": "A domain, hostname, ip, url or hash (md5, sha1, sha256 or sha512) attribute.",
    "output": "MISP attributes and objects resulting from the parsing of the VirusTotal report concerning the input attribute.",
    "references": ["https://www.virustotal.com", "https://developers.virustotal.com/reference"],
    "features": "New format of modules able to return attributes and objects.\n\nA module to take a MISP attribute as input and query the VirusTotal API to get additional data about it.\n\nCompared to the [more advanced VirusTotal expansion module](https://github.com/MISP/misp-modules/blob/master/misp_modules/modules/expansion/virustotal.py), this module is made for VirusTotal users who have a low request rate limit.\n\nThus, it only queries the API once and returns the results that is parsed into MISP attributes and objects."
}