Integrating VirusTotal with Cortex XDR

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Integrating VirusTotal with Cortex XDR

L0 Member

Hi Guys,
In the Artifacts section we are not able to see the VT Score . For this we are manually copying the IP's , Hashes & viewing in the Virustotal console.
Got to know we need to configure the API key but the concern is what data does Cortex XDR submit to VT ?
only hashes , IP's or it will upload the entire file ?
What are the precautions/best practices we need to take & does Cortex submits any sensitive data to  Virustotal  ?

1 REPLY 1

L4 Transporter

Hi @arjun_weeknd,


Cortex XDR does not upload any information to Virus Total. Cortex XDR does exactly what you do, query VT for hash, domain, ip, etc and shows you the result, if any, for each of the artifacts in the XDR incident.

  • 954 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!