Enriching Data with Spur IP Context

Spur IP Context enrichment can provide high-fidelity contextual information on IP addresses. This data includes precision geolocation, SSIDs, anonymity network details, device count, device behaviors, and related IP addresses.

View documentation on the Spur IP Context enrichment for Anomali

Before activating the Spur IP Context enrichment, obtain a Spur IP Context API Key from your Spur accaount.

To activate the Spur IP Context enrichment:

1. Navigate to ThreatStream > APP STORE > APP Store.

2. Click Get Access on the Spur IP Context tile.
3. On the wizard page that opens, click I have credentials.
4. On the next wizard page that opens, click Credentials and then enter your Spur IP Context API Key.
5. Click Activate.

The Spur IP Context enrichment is now active.