mirror of https://github.com/MISP/misp-modules
10 lines
1023 B
JSON
10 lines
1023 B
JSON
{
|
|
"description": "Module to get information from VirusTotal.",
|
|
"logo": "logos/virustotal.png",
|
|
"requirements": ["An access to the VirusTotal API (apikey)"],
|
|
"input": "A domain, hostname, ip, url or hash (md5, sha1, sha256 or sha512) attribute.",
|
|
"output": "MISP attributes and objects resulting from the parsing of the VirusTotal report concerning the input attribute.",
|
|
"references": ["https://www.virustotal.com", "https://developers.virustotal.com/reference"],
|
|
"features": "New format of modules able to return attributes and objects.\n\nA module to take a MISP attribute as input and query the VirusTotal API to get additional data about it.\n\nCompared to the [more advanced VirusTotal expansion module](https://github.com/MISP/misp-modules/blob/master/misp_modules/modules/expansion/virustotal.py), this module is made for VirusTotal users who have a low request rate limit.\n\nThus, it only queries the API once and returns the results that is parsed into MISP attributes and objects."
|
|
}
|