Technology and tools

What is VirusTotal?

A Google-owned service that scans files, URLs, domains and IPs with dozens of security engines and shows the results and relationships.

VirusTotal checks files, URLs, domains and IP addresses against dozens of antivirus engines and URL scanners, and adds sandbox reports and relationships between items. Searching by hash shows whether a file is already known.

Uploads are shared with the security community and paying subscribers can download submitted files. Uploading a sensitive internal document or a targeted sample can therefore alert the attacker or leak data. Searching by hash is safe. Uploading needs thought.

Where you learn it

See VirusTotal in a real investigation

Our missions put you in front of real logs, domains and forums, with these terms underlined where they appear.

Start learning free