Skip to main content
VirusTotal v3 app icon

VirusTotal v3

This app integrates with the VirusTotal cloud to implement investigative and reputation actions using v3 APIsBuilt by Splunk LLC
soar product badge
Default Version 3.0.5

July 17, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#1 in Reputation

This app integrates with the VirusTotal cloud to implement investigative and reputation actions using v3 APIs

Supported actions

  • test connectivity: test connectivity
  • domain reputation: Queries VirusTotal for domain info
  • make request: make request
  • file reputation: Queries VirusTotal for file reputation info
  • get file: Downloads a file from VirusTotal and adds it to the vault
  • ip reputation: Queries VirusTotal for IP info
  • url reputation: Queries VirusTotal for URL info (run this action after running detonate url)
  • detonate url: Load a URL to Virus Total and retrieve analysis results
  • detonate file: Upload a file to Virus Total and retrieve the analysis results
  • get report: Get the results using the scan id from a detonate file or detonate url action
  • get cached entries: Get listing of cached entries
  • clear cache: Clear all cached entries
  • get quotas: Retrieve user's API quota summary including daily, hourly, and monthly limits and usage details