ServiceNow | Use | Carry out Observable lookup in ServiceNow

Once you have configured the integration, you can lookup Observables in EclecticIQ Intelligence Center (EIQ IC) from ServiceNow to check if there is an existing occurence of your Observable in EIQ IC and enrich it with related Observables.

To do this:

1. Log in to ServiceNow.

2. Select the All button and go to Threat Intelligence > IoC Repository > Observables.

3. Open the Observable you’d like to lookup in EIQ IC.

4. Select the EIQ Observable Lookup link.

Consult Related EIQ Oservable tab to see the newly created Observables and easily access their counterpart in EIQ.

You can also select the All button and go to EclecticIQ Intelligence > EIQ Dashboard to see graphs of Observable count by type and by source.