Documentation

{{docApp.title}}

{{docApp.description}}

How can we help?

{{docApp.searchError}}
{{product.name}}

Searching in {{docApp.searchFilterBySpecificBookTitle}}

{{docApp.searchResultFilteredItems.length}} results for: {{docApp.currentResultsSearchText}} in {{docApp.searchFilterBySpecificBookTitle}}
Search results have been limited. There are a total of {{docApp.searchResponse.totalResultsAvailable}} matches.

You have an odd number of " characters in your search terms - each one needs closing with a matching " character!

{{docApp.libraryHomeViewProduct.title || docApp.libraryHomeViewProduct.id}}

{{docApp.libraryHomeViewProduct.description}}

  1. {{book.title}}

{{group.title || group.id}}

{{group.description}}

  1. {{book.title}}

{{group.title}}

VirusTotal / Scan a URL

Operation Information

Run a Scan against the desired URL.

This is a Premium Integration.

Authentication

This operation requires authentication, the details of which can be securely stored on your instance in a KeySafe Key of type Virus Total.

To create a key of this type:

  • In the Configuration area of your Hornbill instance, navigate to Platform Configuration > Security > KeySafe;
  • Click on the + Create New Key button;
  • On the resulting Create New Key form, choose Virus Total in the Type pick list;
  • Give the Virus Total KeySafe key a Title (this is the name / identifier for the Virus Total account as you will see it when using the cloud automation node in your workflows);
  • Optionally populate the Description field;
  • Populate the following fields accordingly, then click the Create Key button to create your new key:
Name Type Description
API Key string The API Key within Virus Total - This can be found within the 'API Key' section when you press the profile icon in the top right of the screen.

Tip

The Option to Generate an API Key can be foudn within the User Profile drop down at the top right corner of the screen.

Revoking Access

If at any point you wish to revoke access to any of the above accounts from your Hornbill instance, just delete the relevant KeySafe key(s) from the KeySafe list.

Warning

This will revoke the rights of any existing Cloud Automation Node in your Hornbill Workflows that are using the revoked Virus Total account, so you will need to manage these workflows accordingly.

Input Parameters

Display Name ID Type Description Required Supported Values
URL url string The Domain You Would like to run a report against. Yes None provided

Output Parameters

Display Name ID Type Description
Status status string Status of the operation
Error error string Any errors returned by the Virus Total operation
URL ID urlId string The ID of the URL scanned
Title of the Site title string The Title Associated with the URL
Site Reputation reputation string The Reputation of the Site that is made available to Virus Total
Site Category category string The Category of the site
Malicious Analysis Statistics maliciousAnalysisStats string The Results on the Domains potential Malicious incidents
Suspicious Analysis Statistics suspiciousAnalysisStats string The Results on the Domains potential Suspicious incidents
Undetected Analysis Statistics undetectedAnalysisStats string The Results on the Domains potential Undetected incidents
Harmless Analysis Statistics harmlessAnalysisStats string The Results on the Domains potential Harmless incidents
Harmless Votes harmlessVotes string The community votes on the domain
Malicious Votes maliciousVotes string The community votes on the domain
In This Document