Perform IoC Lookup activity

The Threat Intelligence Orchestration - Perform IoC Lookup workflow activity accelerates the investigation and remediation process by performing a specific IoC lookup. .

When triggered by the Threat Intelligence Orchestration - Run IoC Lookup workflow, this activity takes a scanID, finds the lookup record, and adds the lookup to the Lookup Queueby creating a lookup queue entry.

Input variables

Input variables determine the initial behavior of the activity.

Table 1. Input variables
Variable Description
scanID [string] Lookup identifier

Output variables

The output variables contain data that can be used in subsequent activities.

Table 2. Output variables
Variable Description
True Triggered the lookup.
False Did not trigger the lookup.