Enriching Data with ReversingLabs Spectra Intelligence

The ReversingLabs Spectra Intelligence enrichment is a set of pivot and context-based functions that can be used to enrich threat hunting and analysis by introducing new and unique insights into the security workflow. It returns data transformations and enrichment visualizations from ReversingLabs Spectra Intelligence, the industry's most comprehensive source of reputation data, into Anomali ThreatStream workflows.

View documentation on using the ReversingLabs Spectra Intelligence enrichment

To activate the ReversingLabs Spectra Intelligence enrichment, you must have a Spectra Intelligence account. If you don't have a Spectra Intelligence account, contact the ReversingLabs Sales department.

To activate the ReversingLabs Spectra Intelligence enrichment:

1. Navigate to ThreatStream > APP STORE > APP Store.

2. Locate the ReversingLabs Spectra Intelligence tile.

3. Click Get Access.

4. On the wizard page that opens, click I have credentials.

5. On the next wizard page, click Credentials.

6. Enter your Spectra Intelligence username, which is the username for the ReversingLabs Spectra Intelligence web services provided by ReversingLabs.

7. Enter your Spectra Intelligence password, which is the password for the ReversingLabs Spectra Intelligence web services provided by ReversingLabs.

8. (Optional) Enter your Spectra Intelligence address, which is the base address of the ReversingLabs Spectra Intelligence (can be entered with or without the “https://” protocol prefix). If left blank, the default value will be used. Use the default address unless instructed otherwise.

9. (Optional) Enter you Spectra Analyze address, which is the base address of the designated ReversingLabs Spectra Analyze instance, if available. This optional parameter must be entered with the “http://” or “https://” protocol prefix.

10. Click Activate.

The ReversingLabs Spectrum Intelligence enrichment is now active.