Observable Enrichment

The Enrich Observable WhoIs workflow performs enrichment on selected observables. If the observables are of a type recognized by the WhoisXML API Integration, the observables are enriched.

Note:

The Threat Intelligence Security Center supports Observable Enrichment only for the WHOIS Integration.

• Run Have I Been Pwned enrichment integration
  Run the Have I Been Pwned (HIBP) enrichment on an email address or domain name observable to determine whether it has been involved in a known data breach.
• Whois integration
  The Whois integration enables you to submit Whois lookups on domain names and URLs to obtain context on URL observables, and to make better determination on threats.
• Shodan integration
  Shodan is a search engine that analyzes service banner information from connected devices all around the globe.