# MalwareBazaar

{% hint style="info" %}
MalwareBazaar is a Threat Intelligence (TI) integration. TI Data Source integrations are used during investigations to improve analysis and in interactive chat to help answer questions. They are optional, but enabling more tooling integrations enhances Dropzone analysis.
{% endhint %}

The Dropzone AI platform supports [MalwareBazaar](https://bazaar.abuse.ch/), a platform from abuse.ch and Spamhaus dedicated to sharing malware samples with the infosecurity community, antivirus vendors, and threat intelligence providers.

## Create an API Key

MalwareBazaar requires an API Key to enable.

To obtain an API key, do the following:

* Create a free account [here](https://auth.abuse.ch/), if you do not have one already
* In your Profile Settings page, scroll down to the Optional section
* Under Auth Key, click "Generate Key"

<figure><img src="/files/P95ufZAE2TMTTETih7gt" alt=""><figcaption><p>Generate Key</p></figcaption></figure>

* Save the key value generated for use later in the Dropzone UI where it will be referred to as the "API key"

<figure><img src="/files/mewbeN8M64xofYmYpHYW" alt=""><figcaption><p>Copy API key</p></figcaption></figure>

## Enable MalwareBazaar

To enable the Data Source integration, do the following:

* Navigate to your Dropzone AI tenant home page e.g. https\://*mycompany*.dropzone.app
* In the bottom left hand corner, click Settings > Integrations

<figure><img src="/files/zN02u3HObDaemUY8E1kD" alt=""><figcaption><p>Integrations Dropdown</p></figcaption></figure>

* Click "Available"

<figure><img src="/files/brI7n2Ux40Tk0jTwBCVh" alt=""><figcaption><p>Click Available</p></figcaption></figure>

* In the Search bar, search MalwareBazaar, then click "Configure"

<figure><img src="/files/raakf2pRctK5cOrhK8uq" alt=""><figcaption><p>The MalwareBazaar Data Tile</p></figcaption></figure>

* Input the API key
* Click "Test & Save" to finish

<figure><img src="/files/uDeKS0PaYV06lsFzoHPc" alt=""><figcaption><p>The MalwareBazaar Data Source Configuration</p></figcaption></figure>

If you have any errors engage your Dropzone AI support representative.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.dropzone.ai/integrations/data/malwarebazaar.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.