Check a file for threats by its hash — automated

The scenario takes a file hash, checks it against a threat database, returns a verdict, and instantly alerts the team in a messenger if it's dangerous.

  • A file checked by a single fingerprint
  • Matched against a threat database in a second
  • Anything malicious triggers an instant alert
  • A clear verdict for every request
Webhook
Set it up for yourselfScriptera

How it works

To get Telegram notifications in Webhook, you don't need a developer: a ready-made scenario watches events and sends messages for you.

  1. Starts when: Receive File Hash
  2. Then: Normalize Hash from Webhook
  3. Check: IF - Valid Hash Format
  4. If yes: HTTP - VirusTotal Hash Lookup
  5. Check: IF - Hash Exists in VT
  6. If yes: Function - Calculate Verdict
  7. Check: IF - Malicious Verdict
  8. If yes: Slack - Malicious Hash Alert
  9. If no: Respond - Clean or Unknown
  10. Then: Send a message
  11. If no: Respond - Unknown Hash
  12. If no: Respond - Invalid Hash

You can launch this Telegram + Webhook integration in Scriptera: describe the task in plain words — the scenario is built, launched and monitored for you.

Similar scenarios