The Intel 471 Vulnerability Enrichment action enables ThreatQ users to enhance Vulnerability objects with intelligence and contextual reporting from Intel 471. By querying the Intel 471 Vulnerability Report stream, the action retrieves relevant threat intelligence and enriches existing Vulnerability objects in ThreatQ with additional attributes and report context. This integration helps analysts gain deeper insight into vulnerabilities, supporting improved prioritization, investigation, and threat analysis workflows.

The integration provides the following action:

• Intel 471 - Enrich Vulnerabilities - queries the Intel 471 Vulnerability Report stream for the submitted vulnerability and enriches the corresponding ThreatQ object with available Intel 471 report context as attributes.

The integration is compatible with Vulnerability objects and provides enrichment data for supported vulnerabilities.

Note: This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.