-
Notifications
You must be signed in to change notification settings - Fork 392
Closed
Labels
category:bugIssue is related to a bugIssue is related to a bugpriotiry:highscope:analyzerIssue is analyzer relatedIssue is analyzer related
Milestone
Description
Describe the bug
When submitting an IP address to the VirusTotal Get Report analyzer it does not return any resolutions.
To Reproduce
Steps to reproduce the behavior:
- Enable and configure VirusTotal Get Report analyzer with a free api key.
- Run analyzer with type ip address
- Review result, no json data in the summary tags regarding resolutions.
Expected behavior
A report summary consisting of the number of resolutions relating to the IP address, coloured based on the severity level. For example: VT:GetReport="200 resolution(s)". This assumes that #1203 is resolved.
Work environment
- Client OS: Windows 10
- Server OS: Red Hat 8
- Browse type and version: Edge 115.0.1901.183
- Cortex version: 3.1.7-1
- Cortex Analyzer name: VirusTotal_GetReport_3_1
- Cortex Analyzer version: 3.1
Possible solutions
Resolutions are included in the free api tier (https://developers.virustotal.com/reference/ip-resolutions). The get_object on line 170 is failing as it returns a list of dictionaries and the VT package expects a dictionary. Using get_json can resolve this.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
category:bugIssue is related to a bugIssue is related to a bugpriotiry:highscope:analyzerIssue is analyzer relatedIssue is analyzer related