Perform Threat Lookup from Security Case

[rcarmack1]

Does anyone have any ideas on how to run a Threat Lookup, or even better to automate the process, from the Security Case > Case Artifacts > Observables? In the attached screenshot, you'll see that running a threat lookup is not an option from the Actions menu.  I think either adding the option here or automating the process once an Observable is added would be ideal.

[waeltarhoun]

Hi,

“Run Threat Lookup” becomes available for observables once you enable a Threat Intelligence integration (such as VirusTotal) from the Integration Configuration module.

Have you already enabled a Threat Intelligence integration?