Thank you for your feedback.
Form temporarily unavailable. Please try again or contact to submit your comments.

Activate and configure the VirusTotal integration

Log in to subscribe to topics and get notified when content changes.

Activate and configure the VirusTotal integration

The Integration Configuration feature allows you to quickly activate and set up third-party security integrations, including VirusTotal integration.

Before you begin

Role required: admin

The Threat Intelligence plugin must be installed and activated before you can use VirusTotal.

Note: This procedure can be used to activate the plugin and configure the integration. You can also activate the plugin using the traditional method.


  1. Access VirusTotal and obtain the API Key under your VirusTotal profile.
  2. Navigate to Security Operations > Integration Configuration.
    The available security integrations appear as a series of cards.
    VirusTotal integration card
  3. In the VirusTotal card, click Install Plugin.
  4. In the Install VirusTotal integration dialog box, review the plugin details and click Activate.
  5. When the activation is complete, click Close & Reload Form.
    The Security Integration screen reloads and the Configure button for the integration is available.
  6. Click Configure.
  7. Enter (or paste) the API Key you acquired from the VirusTotal site.
  8. Click Submit.


Once configured, VirusTotal can be selected for performing lookups on observables in Threat Intelligence and on observables in security incidents.