Detection & Response Enablement
Aperçu
Submits file hash observables (MD5, SHA1, SHA256) to VirusTotal and retrieves the associated file content, creating a new Artifact observable in OpenCTI when a match is found.
VirusTotal Downloader Connector is an internal enrichment Connector that enables automated and manual submissions of file hashes (MD5, SHA1, and SHA256) to VirusTotal to attempt to retrieve associated file contents. If the file is found in VirusTotal, a new Observable of type Artifact will be uploaded.