Integrations/VirusTotal
Neo AgentVirusTotal
Security integration

Is it malicious? Neo asks VirusTotal.

Neo checks hashes, URLs, domains and IPs against VirusTotal's vendors, and submits what it has not seen.

01Capabilities

What Neo does with VirusTotal.

01

Indicator verdicts

Neo reads each security vendor's verdict on a hash, URL, domain or IP.

02

Sandbox behaviour

Neo reads what a file did in VirusTotal's sandboxes.

03

Submit and share

Neo uploads a file or URL and shares it with the community.

02Workflows

Concrete work Neo handles in VirusTotal.

USE CASE

Phishing ticket triage

Neo checks the links, sender domain and attachments of a reported email.

USE CASE

Alert enrichment

Neo adds VirusTotal's verdict on the hash or IP in a security alert to the ticket.

USE CASE

New threat, shared

Neo submits a sample VirusTotal has not seen and posts your verdict.

03Setup

Set it up with Neo.

01

Connect VirusTotal

Enter the credentials the VirusTotal card on Neo's Integrations page asks for. The setup guide shows where to find each one.

02

Start from a use case

Open the VirusTotal card's "What Neo can do" tab and press Set up with Neo on the job you want.

03

Build it with Neo Support

Neo Support picks the tools and the VirusTotal access the job needs, and builds the agent with you.

FAQ

Questions about the VirusTotal integration.

What does Neo need to connect to VirusTotal?+

The credentials the VirusTotal card on Neo's Integrations page asks for, from your VirusTotal account. The setup guide shows where to find each one.

How do I set up one of these use cases?+

Connect VirusTotal, open its "What Neo can do" tab in the Neo dashboard and press Set up with Neo on the use case. Neo Support builds the agent with you.

Ready to wire up VirusTotal?

14-day free trial. No credit card.