Enriching Data with Query.AI

The Query.AI enrichment enables you to view reputation service information from Query.AI on hash and domain observable details pages in ThreatStream.

View documentation on the Query.AI enrichment for Anomali

To activate the Query.AI enrichment:

1. Navigate to ThreatStream > APP STORE > APP Store.

2. Click Get Access on the Query.AI tile.
3. Click I have credentials on the wizard page that opens.

4. On the next wizard page, click Credentials and enter your Query.AI API Key, Platform Connections, and Search Duration.

   Note: See the linked Query.AI documentation above for more information on these fields.

5. Click Activate.

The Query.AI enrichment is now active.