Enriching Data with Anomali Open Ports

The Anomali Open Ports enrichment provides a history of open ports and services for IP addresses (v4 only) on an interactive timeline.

When activated, Anomali Open Ports displays enrichment data on the Open Ports tab in the Enrichments section of observable details pages.

To activate the Open Ports enrichment:

  1. Navigate to ThreatStream > APP STORE > APP Store.

  2. Click Get Access on the Anomali Open Ports tile.
  3. Click Activate.

The Anomali Open Ports enrichment is now active.