Roll up lookup info to security incident activity The Roll up lookup info to security incident activity can be used with any workflow to gather information from a threat lookup and output a summary of the contents as well as the ID of the originating security incident in task work notes. Results Possible results for this activity are: Table 1. Results Result Description Success Lookup report summary rolled up to security incident. Failure Originating task and lookup summary report are empty. Table 2. Input variables Variable Description scanID[string] Lookup identifier. Output variables The output variables contain data that can be used in subsequent activities. Table 3. Output variables Variable Description siId[string] Security incident identifier. response [string] Summary of lookup results including: IoC value, Result, Failure reason, lookup reference, and so on.