Threat Intelligence Orchestration workflows and activites Several workflows are included with Threat Intelligence Orchestration. Workflows and activities automate and expedite your processes. Use workflows and activities to run IoC lookups, populate lookups, perform IoC lookup activities, and more. Threat Intelligence - Run IoC Lookup workflowThe Threat Intelligence - Run IoC Lookup workflow can populate a lookup with an observable, perform an IoC lookup, update an observable with results, and more. This workflow helps you log information and accelerates the investigation and remediation process.