The GreyNoise Operation for ThreatQ allows ThreatQ users to query GreyNoise for additional indicator context. With this operation users can query GreyNoise for metadata including reverse DNS tags, geolocation, and scanned paths/ports. Once a query has performed, this metadata can be linked and saved to the initial indicator