Query the VirusTotal API to obtain comprehensive security analysis reports. Analyze URLs, files, IPs, and domains with automatic relationship data fetching for a complete security overview. Enhance your threat intelligence capabilities with advanced search and detailed relationship analysis tools.
Tools
get_file_report
Name: get_file_report Description: Get a comprehensive file analysis report using its hash (MD5/SHA-1/SHA-256). Returns a concise summary of key threat details including detection stats, threat classification, and important indicators. Parameters: hash (required): The MD5, SHA-1, or SHA-256 hash of the file to analyze. Example: '8ab2cf...', 'e4d909c290d0...', etc.
get_url_report
Name: get_url_report Description: Get a comprehensive URL analysis report including security scan results and key relationships like communicating files, contacted domains/IPs, downloaded files, redirects, and related threat actors. This tool automatically fetches summary information for these key relationships. For detailed, paginated relationship data, use the 'get_url_relationship' tool. Parameters: url (required): The URL to analyze (e.g., 'http://example.com/badsite', 'https://google.com'). The tool will automatically generate the required VirusTotal URL identifier.
get_domain_report
Name: get_domain_report Description: Get a comprehensive domain analysis report including DNS records, WHOIS data, and key relationships like historical SSL certificates, subdomains, resolutions, and related threat actors. This tool automatically fetches summary information for these key relationships. For detailed, paginated relationship data, use the 'get_domain_relationship' tool. Parameters: domain (required): The domain name to analyze (e.g., 'google.com', 'evil-domain.net').
get_ip_report
Name: get_ip_report Description: Get a comprehensive IP address analysis report including geolocation, reputation data, and key relationships like communicating/downloaded files, historical certificates/WHOIS, resolutions, and related URLs/threat actors. This tool automatically fetches summary information for these key relationships. For detailed, paginated relationship data, use the 'get_ip_relationship' tool. Parameters: ip (required): The IP address to analyze (e.g., '8.8.8.8', '192.168.1.1').