---
title: Create a VirusTotal Asset and Task
slug: user-guide-10x/create-a-virustotal-asset-and-task
docTags: 
createdAt: 2025-06-18T11:01:37.464Z
---

In the next part of this quick start exercise, use what you've learned in the previous steps to create a VirusTotal asset and task.

:::hint{type="danger"}
You must have an API key in order to set up the VirusTotal asset. If you don't have one, create one, or contact your Swimlane sales or support representative.
:::

## Create a VirusTotal Asset

To create a VirusTotal asset:

1. From the global navigation menu, select **Integrations.**


   ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/lqFwwUpgW_JqvTsWjRim__integrations-leftnav-icon-hover.png" size="10" width="166" height="54" position="center" showCaption="false"}
2. On Integrations, select the **Plugins** tab and verify that you have the **sw\_virus\_total** plugin uploaded.

If you do not have this plugin uploaded, contact your Swimlane representative.

1. Select the **Assets** tab and click the plus menu icon or the New Asset button to create a new asset. Select VirusTotal as the Asset Type.


   ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/PndApz3f5w6sRgcbfJgyc_vt-asset.png" size="30" width="507" height="229" position="center" showCaption="false"}
2. On the Configure your Plugin window, type in the API key for VirusTotal, enable **Verify SSL,** and then click **Save**.
3. **Important!** Don't forget to click **Test Connection**!
4. ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/xM77QBJqTIT8nAWcflS3I_vt-asset-qs.png" size="36" width="1043" height="681" position="center" showCaption="false"}

## Create a VirusTotal Task

To create a VirusTotal task:

1. From the global navigation menu, select **Integrations.**


   ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/lqFwwUpgW_JqvTsWjRim__integrations-leftnav-icon-hover.png" size="10" width="166" height="54" position="center" showCaption="false"}
2. From the Integrations taskbar, click the plus menu icon, and then select **Create a task**. Filter for VirusTotal and select create on *VirusTotal IP Report.*


   ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/dPFg3TijYY9PPzBRK4OVZ_vt-search-iocs-comments.png" size="32" width="846" height="593" position="center" showCaption="false"}
3. On Create a Task, Add Details, name your task and associate it with the Suspicious Emails application. Click **Save**.


   ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/hfGbeNtcRfI_-FLvBSM_G_vt-task-vt-asset.png" size="30" width="505" height="301" position="center" showCaption="false"}
4. In your new task, associate it with the VirusTotal asset.


   ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/MeiYOlaWai8_ISFDrJ5dQ_vt-asset-search-ioc-comments.png" size="36" width="688" height="567" position="center" showCaption="false"}
5. Click the **Configuration** tab.

In order to get an analysis from VirusTotal, you need to provide an IP address. Let's configure this task to dynamically send VirusTotal the IP address collected in the *IP(s) from Body* field in our Suspicious Emails application.

1. On the Configuration tab, select *Record* from the **Type** pulldown field, and then select *IP(s) from Body* as the **Field.**

::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/WLsWxOmeeDRoSfAsdhzIn_task-config-record.png" size="34" width="1124" height="315" position="center" showCaption="false"}

1. Next, on the Outputs tab click **Update Current Record.**
2. Now you will need to map all of the response values from VirusTotal to a field in the Swimlane record. To do that, you'll map outputs using the Update Current Record output mapping type.
3. ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/kdqQumlQtJWsg1-QX_CIv_update-current-record-qs.png" size="10" width="225" height="243" position="center" showCaption="false"}
4. On the next screen, which asks you, "How would you like to proceed?" select **Map to Existing Fields.**


   ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/94-XrjPWXE6XtXV0Zh4cq_qs-map-to-existing-fields.png" size="32" width="695" height="545" position="center" showCaption="false"}
5. Click through the next screen, which provides you with introduction to mapping.
6. ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/TiNUZ-YiCZ5r-5P-iNsOP_thebasics.png" size="32" width="520" height="375" position="center" showCaption="false"}
7. On Update Current Record, scroll through to review the Swimlane mapped parameters and fields and then select **Add Mappings to App.**
8. ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/VtJPrQsNfqQqLWcjhlb2o_qs-suggested-mappings.png" size="32" width="1010" height="58" position="center" showCaption="false"}
9. Click Approve on the next screen to approve the field creation and mappings.
10. Click **Save**.

## Related Links

[Assets](docId\:Y4Iuap1XpRMMMdjzi5PIr)

[Configurations and Input Mappings](docId\:a18JbA9DkQBGgTr8d4KJG)

[Integrations](docId\:tb1tjlesuLIOavEEK1JSG)

[Output Mapping](docId\:OCwBK73t-1mQ2BIHOFC5P)

[Plugins](docId\:o4ZmSSzvgpHoqZnw0jtRg)

[Tasks](docId\:Ryxk0zN8kFYu4Nr-zKwjM)