Skip to content

[Bug] VirusTotal get report ip_addresses do not return report summary #1203

@TheOnlyTermin

Description

@TheOnlyTermin

Describe the bug
When submitting an IP address to the VirusTotal Get Report analyzer it does not return a report summary from the full report with a free API key.

To Reproduce
Steps to reproduce the behavior:

  1. Enable and configure VirusTotal Get Report analyzer with a free api key.
  2. Run analyzer with type ip address
  3. Review result, no json data in the summary tags, and no report summary on left hand pane.

Expected behavior
A report summary consisting of the number of AV vendors detecting the IP address, coloured based on the severity level. For example: VT:GetReport="3/88"

Complementary information
no_report_summary

Work environment

  • Client OS: Windows 10
  • Server OS: Red Hat 8
  • Browse type and version: Edge 115.0.1901.183
  • Cortex version: 3.1.7-1
  • Cortex Analyzer name: VirusTotal_GetReport_3_1
  • Cortex Analyzer version: 3.1

Possible solutions
I believe this is failing in the IF statement at line 204 as 'downloaded_files' are a premium API feature? I have successfully fixed this by adding a try/except.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions