Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Using Threat Lookup Finding Calculators

Use the Threat Lookup Finding Calculator to calculate the observable findings for your integration.

Before you begin

Role required: sn_ti.admin

Procedure

  1. Navigate to All > Threat Intelligence > Administration > Threat Lookup Finding Calculators.

  2. Click New.

  3. On the form, fill the fields.

    FieldDescription
    Threat Lookup vendorName of the threat look-up vendor.
    Observable TypeSpecify the classification of the observable type to which the script applies. For example, IP address or file hash, and so on. The script applies to all observables if you do not select any observable type.
    Finding ScriptScript editor to determine how you want to identify the various observable findings. The Threat Lookup Finding Calculator contains a sample script with the base system. You can use this script to determine the observable findings, or you can modify this script according to your requirements.
  4. Click Update.