Logo
Resources
Documentation Portal Ideas Portal Guardsix Academy License Portal
Resources
Documentation Portal Ideas Portal Guardsix Academy License Portal
Sign in
  1. Guardsix Servicedesk
  2. Products Hub
  3. Marketplace

VirusTotal

Archived

The application enables you to access information generated by VirusTotal about hash values captured in log.

Release Details

Version: 5.0.0
Release date: 2020-02-26
Supported On: 6.7.0 or later
SHA 256: 6ccee375de786dc8952f5db30c34a49dd8a636e2fdb665126e28e134f15b0a53
Download

Enhancement

The application has been updated to comply with LogPoint v6.7.0.

Installation

Follow these steps to install VirusTotal v5.0.0 application:

  1. Download the VirusTotal_5.0.0.pak file provided in the Download section above.
  2. Install the plugin by importing the pak file to LogPoint under Settings >> System >> Applications.

Past Release

6.0.0 to 6.6.6 ▾
Version: 3.1.0
Release date: 2019-03-26
Supported On: 6.0.0 to 6.6.6
SHA 256: e5330ae36324352a8857b67963036c6ee60cd6c591ea473772ea77a9cd7a455a
Download

Bug Fixes

Previously, when the SHA1 hash in the log was in uppercase, the application failed to detect the value. This has now been resolved.
Functional Description
You can view the enabled Virus total option by drilling-down on a hash value in the search result.
The application redirects you to VirusTotal's page that displays all the information provided by VirusTotal about the hash value.

Sample Log

After installing the application, you can find the Virus total option when you drill down a hash value in the search result.  

symantec-logs.png

The Virus total option redirects you to the VirusTotal page that displays all the information generated by the VirusTotal application about that hash value.

VirusTotal_Page.png

Support

If you have any questions or require assistance, create a support ticket.

Comments

Please sign in to leave a comment.

Follow

Related articles

  • Vulnerability Management
  • WhoIsLookup
  • Universal REST API Fetcher
  • Mitre Dataset Updater
  • DarkTrace
Consent Required To Proceed
By clicking “I Agree & Download”, you confirm that you are authorized to act on behalf of your organization and you give explicit consent for Guardsix to share your organization’s customer name and log source count with NXLog for the sole purposes of entitlement management, compliance verification, and support delivery related to the embedded NXLog technology in the Guardsix SIEM solution.

This data will not be used for sales or marketing and will not be shared with other third parties. You may withdraw your consent at any time by contacting Guardsix Support; withdrawal will not affect processing already performed.
Cancel I Agree & Download
Privacy policy    EULA    Terms of service   
Copyright © , Guardsix. All rights reserved.

Note: We use cookies that are essential for the smooth functioning of our website.