Enriching Data with PolySwarm

The PolySwarm enrichment enables you to view reputation service information from PolySwarm on hash and domain observable details pages in ThreatStream.

View documentation on the PolySwarm enrichment for Anomali

To activate the PolySwarm enrichment:

  1. Navigate to ThreatStream > APP STORE > APP Store.

  2. Locate the PolySwarm enrichment.

  3. Click Get Access on the PolySwarm tile.
  4. On the wizard page that opens, click I have credentials.

  5. On the next wizard page, click Credentials and enter your PolySwarm API Key.

  6. Click Activate.

The PolySwarm enrichment is now active.

Alternatively, if you have an active PolySwarm account, you can activate the enrichment with your PolySwarm API key from the Integrations tab within ThreatStream settings.