From 84fc14f879ad202afc616ffb808f74b22bdffabc Mon Sep 17 00:00:00 2001
From: Rick Kotlarz <43300572+RickKotlarz@users.noreply.github.com>
Date: Thu, 26 Sep 2024 18:28:32 -0400
Subject: [PATCH] Update VirusTotal_plugin_OAPI.yaml

---
 .../VirusTotal/VirusTotal_plugin_OAPI.yaml               | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/Plugins/Community Based Plugins/VirusTotal/VirusTotal_plugin_OAPI.yaml b/Plugins/Community Based Plugins/VirusTotal/VirusTotal_plugin_OAPI.yaml
index cd690d16..64dd8140 100644
--- a/Plugins/Community Based Plugins/VirusTotal/VirusTotal_plugin_OAPI.yaml	
+++ b/Plugins/Community Based Plugins/VirusTotal/VirusTotal_plugin_OAPI.yaml	
@@ -4,7 +4,7 @@ info:
     title: VirusTotal Reports
     description: VirusTotal Reports
     version: "v3"
-#   Updated 26-Sept-2024 @ 4:58 PM ~ rkotlarz
+#   Updated 23-Sept-2024 @ 6:28 PM ~ rkotlarz
     
 servers:
     - url: https://www.virustotal.com/api/v3
@@ -107,7 +107,6 @@ paths:
 #       Get a summary of all behavior reports for a file
 #       https://docs.virustotal.com/reference/file-all-behaviours-summary
 
-
     /files/{id}/behaviour_summary:
         get:
             operationId: VT-GetSummaryOfAllBehaviorReports
@@ -122,6 +121,12 @@ paths:
                       type: string
                   required: true
                   description: The SHA-256, SHA-1 or MD5 file hash (e.g. eae312c5ec2028a2602c9654be679ecde099b2c0b148f8d71fca43706efe4c76)
+                - in: query
+                  name: fields
+                  schema:
+                      type: string
+                  required: false
+                  description: Enter in a fields you want to pull (e.g. analysis_date, calls_highlighted, command_executions, files_opened, files_written, files_deleted, processes_terminated, processes_killed, processes_injected, services_created, services_started, services_stopped, mutexes_created, mutexes_opened, ids_alerts, registry_keys_opened, registry_keys_set, registry_keys_deleted, modules_loaded, mitre_attack_techniques, signature_matches, verdict_confidence)
             responses:
                 "200":
                     description: OK