Security Operations RiskIQ Integration
Enrich security incidents with RIskIQ SSL certificate and Whois information.
Install Trend
View Install Data
| Date | Install Count | Change |
|---|---|---|
| 2026-09-09 | 0 | - |
| 134 days of no change | ||
| 2026-04-27 | 18 | -18 |
| 23 days of no change | ||
| 2026-04-03 | 19 | -1 |
About
RiskIQ® allows security operations personnel to automate a range of threat detection, triage, monitoring, and response tasks. By capturing details around SSL certificates, Whois data, and other public Internet sources, threat indicators or observables can be enriched with RiskIQ data details, and analysts can respond to security incidents more efficiently. When integrated with ServiceNow Security Operations, RiskIQ data intelligence provides additional enrichment data and insight for security incidents or investigations.
Key Features
- Automatic enrichment lookups for the SSL certificate and domain registration information are run on selected observables upon incident creation.
- After the application is configured, the workflow launches automatically for RiskIQ lookups, and completion status is recorded in work notes.
- Observables can be looked up manually by adding them to the Security Incident form or Observable Entry table and launching an enrichment lookup.
- Results are displayed in the SSL Certificates and Observable Enrichment tabs under Related Links.