IoCHub // ioc graph
vt key:not set backend:offline

VirusTotal API key

The key is stored only in this browser (localStorage when "remember" is on, otherwise just this tab). It is never synced to other browsers or to the server's disk. Clearing browser data removes it.

VT request transport

All VirusTotal calls are relayed through the backend (VirusTotal sends no CORS headers, so a browser can't call it directly). Your key is sent per-request and is never stored server-side. A backend login is required for enrichment.

Backend

Used for the VT relay, CAPE (later) and optional server-side graph sync.

Sub-entity fields (which attributes auto-render as sub-entities)

graph storage
Two local slots. Stored in this browser. Download to keep a permanent copy.
entities
right-click an entity → details & enrichers · right-click a sub-entity → collapse · drag to move · scroll to zoom