Elastic Security and VirusTotal integration

Save yourself the work of writing custom integrations for Elastic Security and VirusTotal and use n8n instead. Build adaptable and scalable Development, workflows that work with your technology stack. All within a building experience you will love.

Get Started See n8n in action

How to connect Elastic Security and VirusTotal

Create a new workflow and add the first step

In n8n, click the "Add workflow" button in the Workflows tab to create a new workflow. Add the starting point – a trigger on when your workflow should run: an app event, a schedule, a webhook call, another workflow, an AI chat, or a manual trigger. Sometimes, the HTTP Request node might already serve as your starting point.

Build your own Elastic Security and VirusTotal integration

Create custom Elastic Security and VirusTotal workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.

Supported API Endpoints for VirusTotal

To set up VirusTotal integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to VirusTotal to query the data you need using the URLs you provide.

See the example here

Take a look at the VirusTotal official documentation to get a full list of all API endpoints

Elastic Security and VirusTotal integration details

Elastic Security

With Elastic Security, you can prevent, detect, and respond to attacks on your organization. Years of data are analyzed by Elastic Security, which also automates crucial procedures and secures every system.

Elastic Security node docs + examples

Elastic Security credential docs

See Elastic Security integrations

Related categories

Development

VirusTotal

VirusTotal is an online service owned by Google that analyzes files and URLs for malware and security threats. It aggregates antivirus scan results from multiple engines, providing users with a comprehensive assessment of potential threats, aiding in cybersecurity and threat intelligence efforts.

VirusTotal credentials docs

Using predefined credential types

See VirusTotal integrations

Related categories

Cybersecurity

Other integrations with Elastic Security

The SOAR platform you want

Mountains of monotonous tasks make building and monitoring your workflows a chore. Not anymore.

Learn more

Save engineering resources

Reduce time spent on customer integrations, engineer faster POCs, keep your customer-specific functionality separate from product all without having to code.