Configure the TIE server extension for use with VirusTotal, a free virus, malware, and URL online scanning service.
Request your VirusTotal credentials to configure your TIE server. Visit www.virustotal.com for more information.
If you use VirusTotal, enter your public or private key to access additional file reputation information. VirusTotal is a service that analyzes files and helps to detect viruses, trojans, and other malware. You can access VirusTotal data directly from Threat Intelligence Exchange server when viewing file reputation information.
In Trellix ePO - On-prem, select Menu → Configuration → Server Settings → Threat Intelligence Exchange Server.
Click Edit and enter your VirusTotal key.
When viewing file reputations on the TIE Reputations page, click the VirusTotal tab to see additional file information.
Once the server extension is configured, create, monitor, and adjust TIE server policies to determine what is allowed and blocked.
Use the TIE server policies to run the TIE server in observation mode to build file prevalence (how often a file is seen in your environment) and observe what the TIE server detects in your environment. You can monitor and adjust the policies, or individual file or certificate reputations to control what is allowed in your environment.