Understand the signal.
Read the verdict alongside severity, confidence and malware family. Where available, Pro adds behavioral evidence and MITRE ATT&CK / MBC mappings to support your investigation.
MEET VIRUSSIGNMore than
More than
a verdict.
Investigate files, IPs, domains and URLs with threat assessments, behavioral evidence and connected intelligence, backed by VirusSign’s extensive malware collection.
FROM DATA TO INVESTIGATION
Find context for your next step.
Follow the evidence.
Pivot between related indicators and review available DNS, certificate and registration records. Use the Pro website’s graph, timeline and map to explore the observations in context.
Bring it into your tools.
Use structured API responses and paginated relationships to enrich alerts and research scripts. Explore feeds or dedicated datasets when your workflow needs broader data access.
Available fields and tools depend on your access and the intelligence held for each indicator. Feeds and datasets are arranged separately. Compare Basic & Pro →
PLATFORM WALKTHROUGHFrom your first search
From your first search
to connected evidence.
See how to search an indicator, read an assessment and explore related evidence through the graph, timeline and map.
The walkthrough includes Pro investigation tools. Available views and evidence depend on your access and the indicator.
TRY IT YOURSELF
Start with one indicator.
Search a hash, IP, domain or URL you are investigating. Or explore the interactive Pro demo with illustrative data, without an API key.
Building an integration? The API quick start shows how to make your first request and use the response in a script.