TL;DR: VT4Splunk, VirusTotal’s official Splunk plugin, correlates your telemetry with VirusTotal context to automate triage, expedite investigations and unearth threats dwelling undetected in your environment. This extends Splunk’s own VirusTotal plugin for their SOAR. Next March 30th we will host a webinar along with Splunk to show how to do security investigations with Splunk and VirusTotal. Register here!
One of VirusTotal’s main use cases is technology integrations where VirusTotal’s context is used for automatic security telemetry enrichment for false positive discarding, 2nd opinion detection (true positive confirmation) and incident contextualization + investigation.
This article has been indexed from VirusTotal Blog