Getting Started Guide
Automate a VirusTotal Analysis
Create a VirusTotal Asset and Task
5 min
in the next part of this quick start exercise, use what you've learned in the previous steps to create a virustotal asset and task you must have an api key in order to set up the virustotal asset if you don't have one, create one, or contact your swimlane sales or support representative create a virustotal asset to create a virustotal asset from the global navigation menu, select integrations on integrations, select the plugins tab and verify that you have the sw virus total plugin uploaded if you do not have this plugin uploaded, contact your swimlane representative select the assets tab and click the plus menu icon or the new asset button to create a new asset select virustotal as the asset type on the configure your plugin window, type in the api key for virustotal, enable verify ssl, and then click save important! don't forget to click test connection ! create a virustotal task to create a virustotal task from the global navigation menu, select integrations from the integrations taskbar, click the plus menu icon, and then select create a task filter for virustotal and select create on virustotal ip report on create a task, add details, name your task and associate it with the suspicious emails application click save in your new task, associate it with the virustotal asset click the configuration tab in order to get an analysis from virustotal, you need to provide an ip address let's configure this task to dynamically send virustotal the ip address collected in the ip(s) from body field in our suspicious emails application on the configuration tab, select record from the type pulldown field, and then select ip(s) from body as the field next, on the outputs tab click update current record now you will need to map all of the response values from virustotal to a field in the swimlane record to do that, you'll map outputs using the update current record output mapping type on the next screen, which asks you, "how would you like to proceed?" select map to existing fields click through the next screen, which provides you with introduction to mapping on update current record, scroll through to review the swimlane mapped parameters and fields and then select add mappings to app click approve on the next screen to approve the field creation and mappings click save related links create or edit an asset docid\ y4iuap1xprmmmdjzi5pir configure task input docid\ a18jba9dkqbggtr8d4kjg integrations docid\ tb1tjlesulioaveek1jsg configure task output docid\ ocwbk73t 1mq2bihofc5p upload and manage plugins docid\ o4zmsszvgphoqznw0jtrg create or edit a task docid\ ryxk0zn8kfyu4nr zkwjm