VirusTotal

VirusTotal is a Threat Intelligence (TI) integration. TI Data Source integrations are used during investigations to improve analysis and in interactive chat to help answer questions. They are optional, but enabling more tooling integrations enhances Dropzone analysis.

The Dropzone AI platform supports VirusTotal, a third party service that can analyze suspicious files, domains, IPs and URLs.

Enable The Dropzone Data Source Integration

You'll need the following information:

Dropzone Field	Source
API Key	A VirusTotal API key

You can get an API key from https://www.virustotal.com/. Their privacy policy is available at https://docs.virustotal.com/docs/privacy-policy.

To enable the VirusTotal Data Source, do the following:

• Paste your VirusTotal API key in the "API Key" field

• Click the scan types you wish to have enabled

• Click "Test & Save" to finish

Configuring VirusTotal

If you have any errors engage your Dropzone AI support representative.