Enriching Data with Risk IQ

The Risk IQ enrichment enables you to leverage Risk IQ data from observable details pages and the Explore pivoting tool.

View documentation on the Risk IQ enrichment for Anomali

You must obtain your API Key from the settings page within Risk IQ to configure the Risk IQ service.

To activate the Risk IQ enrichment:

1. If you do not have a Risk IQ Community Edition account, use these steps to register and obtain your API key:

   1. Visit the Risk IQ registration page, enter the required information, and click Register. After completing this step, Risk IQ sends you an activation email.
   2. Locate the Risk IQ activation email in your inbox and complete the enclosed steps required to activate your account.
   3. Login to your Risk IQ account.

   4. Click Account Settings in the Risk IQ menu at the top right of the screen.

      

       

   5. Click Sources and scroll down to the API Access section.

   6. Click Show to expose your User API key.

      

      You will use your API key to activate the enrichment.

2. On the ThreatStream user interface, navigate to APP Store>APP Store.

3. Click Get Access on the Risk IQ tile.
4. Click I have credentials. Alternatively, if you do not have the required credentials, click Request Access. An Anomali Sales representative will contact you and provide the necessary information.
5. Enter the API Username associated with your Risk IQ account.
6. Enter your API Key.
7. Click Activate.