Other articles about VirusTotal Graph:
When performing an investigation, you can search for nodes using the search bar at the top of the page. You can search by a file hash, domain, ip address or url. Multiple entity identifiers can be searched at the same time as far as you press the space key between each of them.
You will be prompted to choose to add the results of the search as new nodes to the current graph or start a new investigation instead.
VIRUSTOTAL INTELLIGENCE SEARCH
You can complement the investigation your running on VirusTotal Graph with the power of the VirusTotal Intelligence search engine. This functionality is only available to our customers with Intelligence package.
You are able to make queries directly against VirusTotal Intelligence and show the results as nodes in VirusTotal Graph.
To do that, you just need to click on “Expand using new Intelligence search” from the relations box in the left panel.
Then introduce a query as you would do when you are using VirusTotal Intelligence.
In addition to that, at anytime you can open the VirusTotal public report or the VirusTotal Intelligence report of an entity doing click on the links to them in the left panel or using the context menu.
Find common patterns is very important to achieve a successful investigation. VirusTotal Graph gives you the opportunity to find common patterns in a selection of nodes or even the nodes within a relationship.
You just need to select the nodes where you want to find the common patterns and click on the “Find Commonalities” box on the left panel. Same way, you can do right click on any selected node and then click on the “Find Commonalities” action.
In background, the commonalities are calculated on the fly and presented to you in the left panel.
You will see the results grouped by the field in common. The following actions are available for commonalities:
Add relationship node
Adds a relationship node to the graph, linked to all the nodes containing the pattern in common.
Show matching nodes
Opens the list of nodes with the pattern in common, in the left panel.
VT Intelligence Search
Opens a new tab in VirusTotal Intelligence and executes a query including the selected commonality. Supported fields only.