Example 1: Select implementations: Threat Lookup
example-1-select-implementations-threat-lookup.md
The example below demonstrates the implementation(s).
Example 1: Only Screen 1: Threat Look Up
You can perform Run Threat Lookup related integration capabilities action using the Investigation tab from the SIR Workspace.
- On the Investigation tab, navigate to the Entry Points Lists section displayed on the left side of the page.
- Select any entry point and run the integration capability action.
[Omitted image "investation-tab-related-list.png"] Alt text: Investigation tab related records list
Note: You can also navigate to the Related Records tab on the workspace to perform the integrations capabilities action.
Threat Look Up is one of the example which is described in detail on how to perform the integrations.
- Select implementations
Select one or more implementations as applicable.
Parent Topic:Unified Experience examples
Related topics
Example 2: Common Inputs: Sighting Search
Example 3: Add specific runtime details inputs to an implementation: Run Additional Actions
44 lines · 2.1 KB
--- title: Example 1: Select implementations: Threat Lookup description: The example below demonstrates the implementation\(s\). locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/example-1-select-implementations-threat-lookup.html release: australia product: Security Incident Response classification: security-incident-response topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Examples, Unified experience framework, SIR Workspace Orchestration, Working with Security Incident Records, Use, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations] --- # Example 1: Select implementations: Threat Lookup The example below demonstrates the implementation\(s\). ## Example 1: Only Screen 1: Threat Look Up You can perform **Run Threat Lookup** related integration capabilities action using the **Investigation** tab from the SIR Workspace. 1. On the **Investigation** tab, navigate to the **Entry Points Lists** section displayed on the left side of the page. 2. Select any entry point and run the integration capability action. \[Omitted image "investation-tab-related-list.png"\] Alt text: Investigation tab related records list **Note:** You can also navigate to the **Related Records** tab on the workspace to perform the integrations capabilities action. **Threat Look Up** is one of the example which is described in detail on how to perform the integrations. - **[Select implementations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/implementation-selection.md)** Select one or more implementations as applicable. **Parent Topic:**[Unified Experience examples](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/unified-expereince-example.md) **Related topics** [Example 2: Common Inputs: Sighting Search]() [Example 3: Add specific runtime details inputs to an implementation: Run Additional Actions]()
This file has no frontmatter.