Contents Security Operations Previous Topic Next Topic Security Operations Integration - Threat Lookup capability Subscribe Log in to subscribe to topics and get notified when content changes. ... SAVE AS PDF Selected Topic Topic & Subtopics Share Security Operations Integration - Threat Lookup capability The Threat Lookups capability performs threat intelligence lookups to determine whether one or more observables are associated with known security threats. The Threat Lookups capability has a workflow, Security Operations Integration - Threat Lookup workflow. When the capability workflow runs, it executes additional workflows for the activated implementations. You can specify an implementation to use to perform a lookup on the selected observables, or you can perform the lookup using all implementations. Note: If no implementations are available, capability actions are not displayed in product menus. Security Operations Integration - Threat Lookup workflowThe Security Operations Integration - Threat Lookup capability workflow accesses available threat lookup implementations and executes the implementation workflows associated with each to perform threat lookups of selected observables. Related tasksChange the order of workflow executionRelated conceptsSecurity Operations Integration - Block Request capabilitySecurity Operations Integration - Email Search and Delete capabilitySecurity Operations Integration - Enrich CI capabilitySecurity Operations Integration - Enrich Observable capabilitySecurity Operations Integration - Get Network Statistics capabilitySecurity Operations Integration - Get Running Processes capabilitySecurity Operations Integration - Isolate Host capabilitySecurity Operations Integration - Publish to Watchlist capabilitySecurity Operations Integration - Sightings Search capability On this page Send Feedback Previous Topic Next Topic
Security Operations Integration - Threat Lookup capability The Threat Lookups capability performs threat intelligence lookups to determine whether one or more observables are associated with known security threats. The Threat Lookups capability has a workflow, Security Operations Integration - Threat Lookup workflow. When the capability workflow runs, it executes additional workflows for the activated implementations. You can specify an implementation to use to perform a lookup on the selected observables, or you can perform the lookup using all implementations. Note: If no implementations are available, capability actions are not displayed in product menus. Security Operations Integration - Threat Lookup workflowThe Security Operations Integration - Threat Lookup capability workflow accesses available threat lookup implementations and executes the implementation workflows associated with each to perform threat lookups of selected observables. Related tasksChange the order of workflow executionRelated conceptsSecurity Operations Integration - Block Request capabilitySecurity Operations Integration - Email Search and Delete capabilitySecurity Operations Integration - Enrich CI capabilitySecurity Operations Integration - Enrich Observable capabilitySecurity Operations Integration - Get Network Statistics capabilitySecurity Operations Integration - Get Running Processes capabilitySecurity Operations Integration - Isolate Host capabilitySecurity Operations Integration - Publish to Watchlist capabilitySecurity Operations Integration - Sightings Search capability
Security Operations Integration - Threat Lookup capability The Threat Lookups capability performs threat intelligence lookups to determine whether one or more observables are associated with known security threats. The Threat Lookups capability has a workflow, Security Operations Integration - Threat Lookup workflow. When the capability workflow runs, it executes additional workflows for the activated implementations. You can specify an implementation to use to perform a lookup on the selected observables, or you can perform the lookup using all implementations. Note: If no implementations are available, capability actions are not displayed in product menus. Security Operations Integration - Threat Lookup workflowThe Security Operations Integration - Threat Lookup capability workflow accesses available threat lookup implementations and executes the implementation workflows associated with each to perform threat lookups of selected observables. Related tasksChange the order of workflow executionRelated conceptsSecurity Operations Integration - Block Request capabilitySecurity Operations Integration - Email Search and Delete capabilitySecurity Operations Integration - Enrich CI capabilitySecurity Operations Integration - Enrich Observable capabilitySecurity Operations Integration - Get Network Statistics capabilitySecurity Operations Integration - Get Running Processes capabilitySecurity Operations Integration - Isolate Host capabilitySecurity Operations Integration - Publish to Watchlist capabilitySecurity Operations Integration - Sightings Search capability
