"Search in VirusTotal" link built-in Graylog

[H2Cyber]

What and Why?

VirusTotal has established itself as the favorite search engine for security analysts when it comes to IPs, hashes and URLs.

The purpose of this feature request is to bridge the gap between Graylog and VirusTotal, by adding a link to "Search in VirusTotal" in the contextual menu of an IP address :

In the case above, the link would lead to https://www.virustotal.com/gui/ip-address/8.8.8.8

Your Environment

• Graylog Version: 4.2.1

[miwent]

This functionality exists in the security product.