mirror of https://github.com/MISP/misp-modules
14 lines
1.0 KiB
JSON
14 lines
1.0 KiB
JSON
{
|
|
"description": "Module to get information from VirusTotal.",
|
|
"logo": "virustotal.png",
|
|
"requirements": [
|
|
"An access to the VirusTotal API (apikey)"
|
|
],
|
|
"input": "A domain, hostname, ip, url or hash (md5, sha1, sha256 or sha512) attribute.",
|
|
"output": "MISP attributes and objects resulting from the parsing of the VirusTotal report concerning the input attribute.",
|
|
"references": [
|
|
"https://www.virustotal.com",
|
|
"https://docs.virustotal.com/reference/overview"
|
|
],
|
|
"features": "New format of modules able to return attributes and objects.\n\nA module to take a MISP attribute as input and query the VirusTotal API to get additional data about it.\n\nCompared to the [more advanced VirusTotal expansion module](https://github.com/MISP/misp-modules/blob/main/misp_modules/modules/expansion/virustotal.py), this module is made for VirusTotal users who have a low request rate limit.\n\nThus, it only queries the API once and returns the results that is parsed into MISP attributes and objects."
|
|
} |