VirusTotal: Scan URL
Description
This step submits a URL to VirusTotal for scanning. You provide the URL, and the step sends it to VirusTotal for analysis. The step returns a scan ID that you can use with the URL Scan Report step to retrieve the results. Use this step in workflows that validate URLs before accessing them, check links in incoming emails, or scan web addresses as part of security monitoring.
References:
- Documentation URL: https://developers.virustotal.com/reference/scan-url
- URL for API Request: https://www.virustotal.com/api/v3/urls
1.1.1 Configurations
Configuration tab:
| No. | Field Name | Description |
|---|---|---|
| 1 | Step name | Specify a unique name for the step. The name has to be unique in a single workflow. This is a mandatory field. |
| 2 | Accept value as variable / static | Leave checkbox unchecked to accept API Key value from a field in the previous steps of the stream using a drop down list. Else enable checkbox for API Key field to appear as Text box. |
| 3 | API Key | Specify or select the unique, public API key generated after signing up the Virus Total account. This is a mandatory field. |
Input tab:
| No. | Field Name | Description |
|---|---|---|
| 1 | URL To Scan | Specify the URL that needs to be scanned. |
Output tab:
| No. | Field Name | Description |
|---|---|---|
| 1 | JSON Output | Specify the output field to hold the result of the successful plugin execution. Default value: JSONOutput |