VirusTotal Graph alternatives
6 tools in the catalogue cover the same ground as VirusTotal Graph and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- abuse.ch HuntingfreeCross-search over the abuse.ch feeds: malicious URLs, samples, botnet command servers and SSL fingerprints, from one of the most cited non-profit sources.
- Feodo TrackerfreeTracks command-and-control servers of banking trojans such as Emotet, Dridex and TrickBot.
- GTFOBinsfreeCurated list of Unix binaries that can bypass local security restrictions in misconfigured systems.
- MISP GalaxyfreeOpen, machine-readable knowledge base of threat actors, tools and techniques, used to share intelligence between organisations in a common vocabulary.
- MITRE ATT&CKfreeGlobal knowledge base of adversary tactics and techniques based on real-world observations. The industry standard framework for describing and categorizing cyber attack behaviors.
- OPENHUNTING.IO Threat LibraryfreeOpen library of threat actors, malware families and campaigns, cross-referenced and sourced. A free alternative to commercial platforms.
VirusTotal Graph
Threat Intelligence
Also written Virus Total Graph, VirusTotalGraph
Visual threat intelligence graph built on VirusTotal data. Map relationships between malware samples, domains, IPs, URLs and files to understand attacker infrastructure visually.
RECOMMENDED USE
Malware relationship mapping, attacker infrastructure visualization
Information
Video tutorials
Learn to use VirusTotal Graph
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
SilentPush
Threat IntelligencePredictive threat intelligence and attack surface management platform. Identifies attacker infrastructure before attacks launch using DNS, hosting and behavioral patterns.
ThreatFox (abuse.ch)
Threat IntelligenceFree threat intelligence platform by abuse.ch for sharing indicators of compromise (IOCs) — IPs, domains, URLs, hashes — with community attribution and MITRE ATT&CK mapping.
OTX AlienVault
Threat IntelligenceOpen Threat eXchange — world's largest open threat intelligence community with 100k+ participants sharing 20M+ threat indicators. Search IPs, domains, hashes, CVEs and subscribe to threat pulses.
URLhaus (abuse.ch)
Threat IntelligenceCommunity-driven database of malicious URLs used for malware distribution. Searchable by URL, domain, IP, CIDR, or hash. Integrates with threat feeds and blocklists.
User reviews
Be the first to leave a review