Hi,
the virustotal integration on Sophos intelix seems to be broken for URL
For file uploads it's working. Probably only the URL check against virustotal does not work.
can you check and forward that please?
thanks.
Hi LHerzog,
Let me know if this is still causing issues for you. I tried checking with the Sophos HIPS Test exe file from sophostest.com and saw the same results on Virustotal and Intelix.- https://www.virustotal.com/gui/file/3eeea768a32caaf324c2a0d23745b0aabf06a8535bbf0a7c24e3eb826eab7506- intelix.sophos.com/.../file
Hi Qoosh my post was about URL checks. If I upload a file, the VT integration works - as shown by your links.
URL check VT integration is not working
https://intelix.sophos.com/report/d71363de7f99474aa528326665636569/static/file
interestingly it worked for sophostest:
https://intelix.sophos.com/report/15c5c9bd70df4bd4a2bbdb58b6ec54c7/static/file
Thank you for clarifying, I can confirm I'm also seeing this issue from my side.
I will follow up with our team and update you here going forward.
The current behaviour of the intelix is that it will scan the content hosted at the URL you specify. The scanned content will then be compared with VirusTotal's results for the same content. This results in the Virustotal report showing no results when checking certain URLs.
This behaviour will be changed in a future release so that intelix shows information more closely to that of virustotal when analyzing links. Thank you for raising this issue with our team.
thank you!