Integrating with Farsight

The Farsight integration enables you to use the Farsight service for Passive DNS lookup. If results are returned from the Farsight service, they are displayed on observable details pages in addition to the ThreatStream DNS lookup service.

To activate the Farsight integration:

1. In the bottom-left corner of the side navigation panel, click > ThreatStream > Integrations.

2. Click Activate on the Farsight tile.

3. Enter your Farsight API Key.

4. Click Save.

The integration is now ready for use.