For AI agents: visit https://virustotal.readme.io/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI.
Jump to Content
Home
Guides
API Reference
v2.0
v3.0
Guides
v3.0
Home
Guides
API Reference
Please give me an API key
About Us
How it works
Join Community
Contributors
Comments
Terms of Service and Privacy Policy
Terms of Service
Historic Terms of Service
Privacy Policy
Historic Privacy Policy
Account Management
Group Management
Configure SAML with Okta
Configure SAML with Ping
Configure SAML with Entra ID
Single Sign On Authentication
Searching for users
Walkthrough guide for VirusTotal group administrators
Service Accounts Management
Service Accounts
Quota Management
Understanding Consumption
API
API Overview
VT Intelligence
VirusTotal Intelligence Introduction
Searching
Search Modifiers
File search modifiers
IP address search modifiers
Domain search modifiers
URL search modifiers
File - List of Engines
Netloc - List of engines
Full list of VirusTotal Intelligence search modifiers
Full list of VirusTotal Intelligence tag modifier
Full list of VirusTotal Intelligence behaviour_tags modifier
Collection search modifiers
Search Tools
File similarity search
Content search (VTGrep)
Searching using entities
VirusTotal Collections Introduction
Saved Searches
IOC Reputation & Enrichment
File Behaviours
In-house Sandboxes - behavioural analysis products
External behavioural engines sandboxes
Reports
Full list of File object attritbutes
VT Hunting
What's VT Hunting?
IOC Stream
Sources Subscriptions
Threat Feeds
Livehunt
File hunting: Writing YARA rules for Livehunt
Network hunting: Writing YARA rules for Livehunt
Examples of network hunting using Livehunt
Retrohunt
Crowdsourced Rules
Crowdsourced IDS Rules
Crowdsourced YARA Rules
Crowdsourced YARA rules dashboard
Sigma rules
VTDIFF - Automatic YARA rules
VT Graph
Introduction
Overview
Search and start new investigation
Management
Nodes
Commonalities and Hunting
Private Scanning
Private Scanning
OpenVPN support on private scanning
Technology Integrations
Integrations
VT4Splunk, official VirusTotal app for Splunk
Connectors
Splunk
Mandiant Advantage - Threat Intelligence
MISP
List of VT Integrations
Tools
Tools overview
Desktop Apps
Mobile Apps
Browser Extensions
VT4Browsers + Google TI
API Scripts and client libraries
Batch file downloads
VT Bot
FAQ
Frequently Asked Questions
Usage and Quotas
Please give me an API key
How consumption quotas are handled
How can I have access to a higher quota?
What is the difference between the public API and the private API?
File/URL Submissions
What kind of files will VirusTotal scan?
I accidentally uploaded a file with confidential or sensitive information to VirusTotal, can you please delete it?
Should I upload files larger than 650MBs ?
Empty file and VirusTotal uploads
How can I link to the most recent report on a given file or URL?
How can I automate scans?
File from a URL scan was not enqueued for antivirus scanning
What type of files are supported by code insight?
What type of compressed files are supported?
Why does my signed file appear as "not signed" on VirusTotal?
Antivirus Products
AV product on VirusTotal detects a file and its equivalent commercial version does not
URL scanner verdict differ from its corresponding antivirus solution
I am experiencing a false positive, my file or site should not be detected.
What does the green circle with a white tick mark icon mean?
Why don't you have statistics comparing antivirus performance?
Searching and Hunting
Intelligence - How do I search for malware detected as X
What is YARA?
VTDiff
How does VTDiff work?
Error - "Need to give exclusion list for filetype"
When is an analysis included in the feeds?
I lost access to my authentication device/offline codes for 2FA
Please give me an API key
