Perform IoC Lookup activity The Threat Intelligence Orchestration - Perform IoC Lookup workflow activity accelerates the investigation and remediation process by performing a specific IoC lookup. . When triggered by the Threat Intelligence Orchestration - Run IoC Lookup workflow, this activity takes a scanID, finds the lookup record, and adds the lookup to the Lookup Queueby creating a lookup queue entry. Input variables Input variables determine the initial behavior of the activity. Table 1. Input variables Variable Description scanID [string] Lookup identifier Output variables The output variables contain data that can be used in subsequent activities. Table 2. Output variables Variable Description True Triggered the lookup. False Did not trigger the lookup.