The Contextal Lens Operation enables ThreatQ users to submit file attachments to Contextal Lens for automated analysis and retrieve detailed enrichment results directly within ThreatQ. The operation supports both new file submissions and retrieval of existing analyses, allowing analysts to review Contextal work graphs, triggered actions, and other enrichment data that can be applied to ThreatQ file objects.

The integration provides the following operation actions:

• Submit File – Submits a ThreatQ file attachment to Contextal Lens for analysis and returns the resulting enrichment data for review and ingestion into ThreatQ.
• Get Analysis – Retrieves the results of a previously submitted Contextal Lens analysis using an existing Contextal Lens Work ID file attribute. If multiple Work IDs are available, the action prompts you to select the analysis to retrieve.

The integration is compatible with File (attachment) type system objects.