Google's AI-powered threat intelligence, one of the largest in the world, includes malicious judgment information such as files, IPs, and domains.
This is a solution from Google Cloud that provides various threat intelligence, available for free or for a fee. Since the service started in 2004, it has retained a vast amount of files uploaded by many users, as well as the analysis results, making it a service that can be referred to as the "Google of Malware."
Inquire About This Product
basic information
*The information on this page is an excerpt from the product page of Anchor Technologies. For more details, please visit the product page below.* https://anchor-u.com/product/virustotal/ ■Search and Download via Web Interface 【Basic Bundle】300 times/month 【Professional Bundle】1,000 times/month 【Professional+ Bundle】5,000 times/month 【Duet Bundle】20,000 times/month ■Private API (Premium API) 【Basic Bundle】1,000 times/day 【Professional Bundle】10,000 times/day 【Professional+ Bundle】30,000 times/day 【Duet Bundle】100,000,000 times/month ■Other various features including the following - Livehunt (monitoring function using YARA rules) - Retrohunt (search function using YARA rules) - VT Diff - Threat Hunter PRO - VT Graph - VT Insights
Price information
5 million yen or more (however, this varies by license. Please contact us for pricing for each license.)
Delivery Time
P3
Applications/Examples of results
By integrating the reputation of files, IPs, domains, etc. (detection status across over 70 different antivirus software) with your organization's EDR, SIEM, SOAR, and other systems via API, it is possible to minimize false negatives and false positives generated by EDR and similar tools. Additionally, it is possible to clarify the nature of the file through determinations made by IDS/YARA/Sigma rules and surface and dynamic analysis using various other tools incorporated in VirusTotal. Furthermore, it is possible to identify entities related to the file (such as communication destination IP addresses, domains, parent files that generate the file, and groups of files bundled with the file) and to investigate those relationships in detail. With the availability of AI-based code analysis features and dynamic analysis capabilities for files in a private environment (optional feature), it becomes possible to quickly assess the risk associated with a file.
Detailed information
-
In addition to searching by hash values, it is possible to specify conditions for searching files, IPs, domains, etc., using various queries (modifiers) (e.g., files that were first observed in the last two days and detected as ransomware by five or more antivirus software). It is also possible to search for Collections (which are classifications of files by VirusTotal users, such as "emotet" or "Cobalt Strike").
-
When you select a file, the Detection tab allows you to check the detection status by various antivirus software. Additionally, you can view not only the current detection status but also the detection status at a specific point in the past on a daily basis.
-
In a private environment, it is possible to conduct sandbox analysis. This allows you to obtain investigation results while keeping the file itself hidden from other VirusTotal users. This eliminates the risk of unintentionally exposing your company's confidential information to the outside.
-
The Threat Landscape (VT Insights) feature is only available with the Duet Bundle. This feature allows users to check information related to various IoCs (files, IP addresses, domains) in the Community tab, including "References," "Collections," and "Threat Actors." Additionally, there is a "Subscription" feature that enables continuous monitoring of subscribed IoCs. - References: Users can check information published by various security vendors and researchers. - Collections: Users can review IoCs such as file hash values, web page URLs/domains, and various IP addresses related to attack campaigns or threat actors, organized into specific groups. - Threat Actors: Users can access details about attacker groups and related IoCs.
Line up（6）
| Model number | overview |
|---|---|
| VirusTotal Basic Bundle | Entry-level license for VirusTotal. Allows the use of the minimum necessary features. |
| VirusTotal Professional Bundle | License that relaxes various restrictions of the VirusTotal Basic Bundle (such as the number of API calls per day). |
| VirusTotal Professional+ Bundle | License that not only relaxes various restrictions of the VirusTotal Professional Bundle but also typically includes Threat Hunter PRO, which expands the scope of files considered during query searches from the usual last 3 months to the last 12 months. |
| VirusTotal Duet Bundle | Top-tier license that allows access to almost all features of VirusTotal. It includes advanced features such as Threat Landscape (VT Insight), which enables profiling of threat actors and malware itself. Additionally, it allows for listing explanatory articles and their content regarding the relevant IoCs provided by security vendors. |
| Private Scanning | Option that allows files to be analyzed in a completely private environment without uploading them in a way that can be seen by third parties outside the organization. This option is available through a contractual agreement and is standard in the Duet Bundle. |
| Crowdsourced AI | Code assessment feature using various AI models. Displays in natural language how the target file operates and any security concerns it may have, if any. |
catalog（1）
Download All Catalogs
Company information
We sell excellent security products from around the world as an authorized dealer, and we also provide various security-related services. Here are four major features: 1. Domestic lowest price level We achieve the lowest price level in the country through effective operations and resource optimization. We welcome price comparisons with other companies. 2. Our unique after-support In addition to the manufacturer's standard support, we provide our unique after-support tailored to the needs of our customers. Contracts are not mandatory but optional. 3. Strong negotiation power with manufacturers Based on our extensive experience and trust with manufacturers, we negotiate with them according to our customers' needs and strive to solve their challenges. 4. Honest information provision As professionals with deep industry knowledge, we strive to provide honest information to assist our customers in making the best choices.