ThreatEnrichments
A valid Incident Orchestration license is required for this resource
All enrichments procured from threat are placed here
Fields
hops (
[ThreatEmailHop]
)
Parsed network hops
links (
[ThreatEmailLink]
)
Parsed email links