w0h1v/mcp-virustotal

VirusTotal Command Line Interface

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

Indicators of Compromises (IOC) of our various investigations

PowerShell module that intearacts with the VirusTotal service using a VirusTotal API (free)

Indicators of Compromise (IOCs) from malware or suspicious network traffic

Enrich your investigations on IPs, Domains etc. with OSINT

Access SentinelOne's Purple AI and security services through the Model Context Protocol (MCP) - query alerts, vulnerabilities, misconfigurations, and inventory

AI-powered phishing & threat-analysis platform to automatically inspect, classify, and report suspicious emails, files, URLs, IPs, and hashes built for teams and organizations

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.