Run Default IoC Lookup Sources activity

The Threat Intelligence Orchestration - Run Default IoC Lookup Sources activity takes in a lookup request ID and creates multiple lookups depending on the entered data values.

When triggered by the Threat Intelligence Orchestration - Run IoC Lookup workflow, this activity evaluates the include in bulk scan column of the supported lookup type table of each lookup source for each data type. If True, a lookup is added to the lookup request.

Input variables

Input variables determine the initial behavior of the activity.

Table 1. Input variables
Variable Description
scan_request_id Lookup request system identifier

Output variables

The output variables contain data that can be used in subsequent activities.

Table 2. Output variables
Variable Description
Number of scans created Integer