Roll up lookup info to security incident activity

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 1 minute de lecture

    • The Roll up lookup info to security incident activity can be used with any workflow to gather information from a threat lookup and output a summary of the contents as well as the ID of the originating security incident in task work notes.

    Results

    Possible results for this activity are:

    Tableau 1. Results
    Result Description
    Success Lookup report summary rolled up to security incident.
    Failure Originating task and lookup summary report are empty.
    Tableau 2. Input variables
    Variable Description
    scanID[string] Lookup identifier.

    Output variables

    The output variables contain data that can be used in subsequent activities.

    Tableau 3. Output variables
    Variable Description
    siId[string] Security incident identifier.
    response [string] Summary of lookup results including: IoC value, Result, Failure reason, lookup reference, and so on.