Set Up Reputation Integration

Using VirusTotal, EPM can provide scan analysis information based on application hash. The analytics gathered can help an organization determine whether an application is suspicious or malicious.

Events All report in EPM

View results of the reputation findings on the Events > All reporting page. The Reputation column displays only when reputation is configured here.

 

Events All report in EPM showing more details on an event.

Click the link for an event to view more details. Here, click the link for the reputation score to learn more about the VirusTotal scoring.

 

Set up VirusTotal

  1. Go to Configuration > VirusTotal Settings.
  2. Select Enable VirusTotal Reputation Integration.
  3. Integrating with VirusTotal requires an API key. If you do not already have a key, click Get Virus Total API Key.
  4. Click Validate Settings.