Container Threat Detection (KTD) - VirusTotal-Hash Links

[rafaelramirez]

How does it work?

• Hash Generation: The system generates hashes for process binary data.
• VirusTotal (VT) Query: Hashes are used to construct VT links and query the VT database.
• Link Retrieval: VT link is retrieved and displayed alongside corresponding findings.
• Risk Assessment: Quickly assess risk based on VT reputation data (e.g., benign, suspicious, malicious).

Does customers need a VirusTotal License?
VirusTotal License are not required to leverage this feature.

Are we leveraging VT data when rating the severity of the finding (ex positive match = high / critical, no match at all = low or something like that) 
We are not leveraging VT data to rate the severity of the findings.