VirusTotal
Enrich domains and file hashes with malware detections and threat context.
Overview
VirusTotal aggregates malware detections and threat data for files, domains, URLs, and related indicators.
Malfors uses VirusTotal to enrich domains and file hashes in your graph with reports and detection context.
This helps you see whether an entity is known to security vendors and decide if it should be blocked, traced, or correlated with other evidence.
Configure
- Create a VirusTotal account and generate your API key.
- In Malfors, open Enrichments → VirusTotal → Add Token.
- Paste your token into the field and save.
- VirusTotal enrichments are now available.