Query VirusTotal for IP, domain, hash, and URL reputation reports.
npx skills add https://github.com/Liberty91LTD/cti-skills --skill lookup-virustotal
Please help me install this Agent Skill. Skill: lookup-virustotal Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/lookup-virustotal Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill lookup-virustotal
VirusTotal reputation checks streamline IOC enrichment by providing a centralized source of truth and concise risk signals.
Ask the AI to check an IOC against VirusTotal to obtain a structured reputation report.
High-intent search queries and answers about installing and using this skill.
To enrich IOCs with VirusTotal reputation data, query IPs, domains, file hashes, and URLs to obtain detection ratios, community scores, and verdicts. This provides a centralized source of truth and concise risk signals for quick triage during threat investigations.
A VirusTotal reputation lookup returns a structured JSON payload containing fields like source, indicator, type, query_time, detection_ratio, community_score, verdict, and key_findings to guide containment and downstream analysis.
Yes, you can check multiple indicator types including IPs, domains, file hashes, and URLs against VirusTotal. The lookup aggregates verdicts, detection ratios, and community signals to provide malware scores and top findings for triage.
The best way to automate IOC enrichment for threat intelligence is to query VirusTotal reputation checks to fetch aggregated malware scores and top findings. This streamlines the process by providing a centralized source of truth for risk signals and detection ratios.
The metadata does not specify dependencies or API key requirements for performing a VirusTotal lookup. You can ask the AI to check an IOC against VirusTotal to obtain a structured reputation report with detection ratios and community signals.
mikopbxRetrieve MikoPBX Docker container IPs, ports, and API URLs.
Happy-Technologies-LLCGenerate phased security incident response actions with MITRE mappings.
dapperdiversAutomate threat intelligence collection and indicator enrichment workflows for security analysis.
nathanielcrowell12-specSend transactional emails with Resend and React Email components.
