Enrich Observable WhoIs workflow The Enrich Observable WhoIs workflow performs enrichment on selected observables. If the observables are of a type recognized by the WhoisXML API Integration, the observables are enriched. About this task This workflow is triggered by the Security Operations Integration - Enrich Observable capability when you perform enrichment on one or more observables, and the WhoIs implementation is selected. Workflow process activities include: Execution Tracking - Begin activityThe Execution Tracking - Begin workflow activity starts the auditing process for a Security Operations Integration workflow that operates on observables. Observable Enrichment Lookup activityThe Observable Enrichment Lookup workflow activity initiates the observable enrichment process.Create Enrichment Data for Record activityThe general purpose Create Enrichment Data for Record workflow activity can be used to enrich multiple types of records. Capability Execution Tracking - Complete activityThe Capability Execution Tracking - Complete workflow activity updates the audit record when the workflow is complete.Capability Execution Tracking - Failure activityThe Capability Execution Tracking - Failure workflow activity records a failure to the audit record.