IoC scanning and dataset inclusionAny IoC submitted or queried via the API will be scanned and added to the Google Threat Intelligence dataset, making it accessible to the community. Do not submit or query indicators containing sensitive, confidential, or personally identifiable information (PII).
For uploading files smaller than 32MB you can simply use the POST /files endpoint, but for larger files you need to obtain a special upload URL first, and then send the POST request to the upload URL instead of sending it to /files. The POST request should have the same format expected by the POST /files endpoint. Each upload URL can be used only once.
Files larger than 200MBsNotice that although the actual size limit is 650MBs, files larger than 200MBs tend to be bundles of some sort, (compressed files, ISO images, etc.) in these cases it makes sense to upload the inner individual files instead for several reasons, as an example:
- Engines tend to have performance issues on big files (timeouts, some may not even scan them).
- Some engines are not able to inspect certain file types whereas they will be able to inspect the inner files if submitted.
- When scanning a big bundle you lose context on which specific inner file is causing the detection.
{
"data": "http://www.virustotal.com/_ah/upload/AMmfu6b-_DXUeFe36Sb3b0F4B8mH9Nb-CHbRoUNVOPwG/"
}