Endpoint Protection

 View Only
  • 1.  Hash value

    Posted Dec 19, 2017 08:05 AM

    Does someone knows the site to check hash value coverage in bulk.

     

    using virustotal.com only one ny one can be checked, i need for bulk. 



  • 2.  RE: Hash value

    Posted Dec 19, 2017 08:07 AM

    Virustotal allows bulk if you use their API. Outside of that, I don't know of any others.



  • 3.  RE: Hash value

    Posted Dec 19, 2017 08:39 AM

    Hi Prabhu,

    Thanks for the post.  Symantec does not provide such a bulk-hash service.  Customers with a current Tech Support contract can check coverage of one hash at a time.  That's intended to confirm details about potentially-malicious/unknown hashes seen in their own envrionments, rather than double-check a long list of IoCs from an advisory or article.

     

    Does Symantec Detect This: An Illustrated Guide to Public Hash Submission

    https://www-secure.symantec.com/connect/articles/does-symantec-detect-illustrated-guide-public-hash-submission