From 960203ee32f4912cf9267cd61a1a92a334bd5970 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pablo=20P=C3=A9rez?= <122302023+pabloperezj@users.noreply.github.com> Date: Tue, 16 Jul 2024 10:51:54 +0200 Subject: [PATCH] Update Packs/VirusTotal/Integrations/VirusTotalV3/README.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> --- Packs/VirusTotal/Integrations/VirusTotalV3/README.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/Packs/VirusTotal/Integrations/VirusTotalV3/README.md b/Packs/VirusTotal/Integrations/VirusTotalV3/README.md index c20bdb687f1b..857ba22c24a7 100644 --- a/Packs/VirusTotal/Integrations/VirusTotalV3/README.md +++ b/Packs/VirusTotal/Integrations/VirusTotalV3/README.md @@ -2567,6 +2567,10 @@ Get analysis of a private file submitted to VirusTotal. - **VT Engine Vendors**. Array. VT vendors who flagged the indicator as malicious. - **VT Engine Detection Names**. Array. VT detection names that flagged the indicator as malicious. -To display the new fields in indicators, navigate to `Settings -> Objects Setup -> Indicators -> Types`. Select the desired indicator type, for example, `File`. Click on `Edit` and, under `Custom Fields`, choose the desired field and add the corresponding path. For instance, if you select the `VT Engine Detections` field for the `File` indicator type, add the path `File.VTVendors.EngineDetections`. This will enable the field to be populated in the indicator data. +To display the new fields in indicators: + +1. Navigate to `Settings > Objects Setup > Indicators > Types`. +2. Select the desired indicator type, for example, `File`. +3. Click `Edit` and, under `Custom Fields`, choose the desired field and add the corresponding path. For instance, if you select the `VT Engine Detections` field for the `File` indicator type, add the path `File.VTVendors.EngineDetections`. This will enable the field to be populated in the indicator data. Note that the field will not automatically appear in the indicator's layout. To make it visible, go to `Settings -> Objects Setup -> Indicators -> Layouts`, select the desired layout (e.g., `File Indicator`), click `Detach` if needed, and then edit the layout to include the new field.