Version
All versions of Cb Response
Issue
As of October 16, 2017, the Virus Total feed has been deprecated in favor of the more robust Cb Reputation Threat Score. Any watchlists that use the VT score will no longer function as expected.
Cause
The Cb Response Team has deprecated the VT feed.
Solution
All watchlists that reference the VT feed should be modified to use the Cb Reputation Threat Score instead. Please ensure that you review how the Cb Reputation Threat Score is reported so you ensure that your updated query works as expected.
For Cb Response 5.x ---
In Cb Response 5.x versions, you will need to recreate any watchlists that reference “alliance_score_virustotal” and replace this with “alliance_score_srsthreat”
For Cb Response 6.x ---
Replace all references in a watchlist to this:
With this:
