For AI agents: visit https://virustotal.readme.io/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI.

Jump to Content

Home Guides API Reference

Guides

Home Guides API Reference

About Us

How it works
Join Community
Contributors
Comments
Terms of Service and Privacy Policy

Account Management

Group Management
Service Accounts Management
- Service Accounts
Quota Management
- Understanding Consumption

API

API Overview

VT Intelligence

VirusTotal Intelligence Introduction
Searching
Search Modifiers
Search Tools
- File similarity search
Content search (VTGrep)
Searching using entities
VirusTotal Collections Introduction
Saved Searches

IOC Reputation & Enrichment

File Behaviours
- In-house Sandboxes - behavioural analysis products
- External behavioural engines sandboxes
Reports
Full list of File object attritbutes

VT Hunting

What's VT Hunting?
IOC Stream
- Sources Subscriptions
- Threat Feeds
Livehunt
Retrohunt
Crowdsourced Rules
VTDIFF - Automatic YARA rules

VT Graph

Introduction
Overview
Search and start new investigation
Management
Nodes
Commonalities and Hunting

Private Scanning

Private Scanning
OpenVPN support on private scanning

Technology Integrations

Integrations
- VT4Splunk, official VirusTotal app for Splunk
Connectors
List of VT Integrations

Tools

Tools overview
Desktop Apps
Mobile Apps
Browser Extensions
- VT4Browsers + Google TI
API Scripts and client libraries
- Batch file downloads
VT Bot

FAQ

Frequently Asked Questions
Usage and Quotas
File/URL Submissions
Antivirus Products
Searching and Hunting
- Intelligence - How do I search for malware detected as X
- What is YARA?
VTDiff
- How does VTDiff work?
- Error - "Need to give exclusion list for filetype"
When is an analysis included in the feeds?
I lost access to my authentication device/offline codes for 2FA

Private Scanning