misp-modules/documentation/website/expansion/virustotal_public.json

14 lines
1.0 KiB
JSON

{
"description": "Module to get information from VirusTotal.",
"logo": "virustotal.png",
"requirements": [
"An access to the VirusTotal API (apikey)"
],
"input": "A domain, hostname, ip, url or hash (md5, sha1, sha256 or sha512) attribute.",
"output": "MISP attributes and objects resulting from the parsing of the VirusTotal report concerning the input attribute.",
"references": [
"https://www.virustotal.com",
"https://docs.virustotal.com/reference/overview"
],
"features": "New format of modules able to return attributes and objects.\n\nA module to take a MISP attribute as input and query the VirusTotal API to get additional data about it.\n\nCompared to the [more advanced VirusTotal expansion module](https://github.com/MISP/misp-modules/blob/main/misp_modules/modules/expansion/virustotal.py), this module is made for VirusTotal users who have a low request rate limit.\n\nThus, it only queries the API once and returns the results that is parsed into MISP attributes and objects."
}