Roll up lookup info to security incident activity The Roll up lookup info to security incident activity can be used with any workflow to gather information from a threat lookup and output a summary of the contents as well as the ID of the originating security incident in task work notes. Results Possible results for this activity are: Table 1. Results Result Description Success Lookup report summary rolled up to security incident. Failure Originating task and lookup summary report are empty. Table 2. Input variables Variable Description scanID[string] Lookup identifier. Output variables The output variables contain data that can be used in subsequent activities. Table 3. Output variables Variable Description siId[string] Security incident identifier. response [string] Summary of lookup results including: IoC value, Result, Failure reason, lookup reference, and so on.
Roll up lookup info to security incident activity The Roll up lookup info to security incident activity can be used with any workflow to gather information from a threat lookup and output a summary of the contents as well as the ID of the originating security incident in task work notes. Results Possible results for this activity are: Table 1. Results Result Description Success Lookup report summary rolled up to security incident. Failure Originating task and lookup summary report are empty. Table 2. Input variables Variable Description scanID[string] Lookup identifier. Output variables The output variables contain data that can be used in subsequent activities. Table 3. Output variables Variable Description siId[string] Security incident identifier. response [string] Summary of lookup results including: IoC value, Result, Failure reason, lookup reference, and so on.
