Cortex-Analyzers/responders/VirustotalDownloader/VirustotalDownloader.json
2020-07-15 17:27:35 +02:00

35 lines
1.0 KiB
JSON

{
"name": "Virustotal_Downloader",
"version": "0.1",
"author": "Mario Henkel @hariomenkel",
"url": "https://github.com/TheHive-Project/Cortex-Analyzers",
"license": "AGPL-V3",
"description": "Download a file from Virustotal by its hash",
"dataTypeList": ["thehive:case_artifact"],
"command": "VirustotalDownloader/VirustotalDownloader.py",
"baseConfig": "VirustotalDownloader",
"configurationItems": [
{
"name": "virustotal_apikey",
"description": "Virustotal API key which should be used to download files",
"type": "string",
"multi": false,
"required": true
},
{
"name": "thehive_url",
"description": "URL pointing to your TheHive installation, e.g. 'http://127.0.0.1:9000'",
"type": "string",
"multi": false,
"required": true
},
{
"name": "thehive_apikey",
"description": "TheHive API key which is used to add the downloaded file back to the alert/case",
"type": "string",
"multi": false,
"required": true
}
]
}