Threshold setting for VirusTotal scan result
VirusTotal scans files/hashes/urls with various security venders and some venders frequently cause false positives. We usually consider how many venders vote as malicious to decide it is truly malicious.
I suggest to add threshold setting of VirusTotal positive vote score for decision to add VT_BAD tag.
This sounds like a very good idea. I will go ahead and submit a feature request to our development team to see about adding a threshold setting to the VirusTotal's submission of the VT_Bad tag. While I cannot guarantee that this feature will be implemented I recommend keeping an eye on our changelog for PhishER, found here: https://support.knowbe4.com/hc/en-us/articles/360014088973.
Kirjaudu sisään jättääksesi kommentin.