GreyNoise Lookup Tables not listed as Enrichment sources in Panther
When trying to set up GreyNoise (Basic or Advanced), you don't see the GreyNoise Lookup Tables listed in the Enrichment Sources section of your Panther Console.
To resolve this issue:
- In the Panther Console, navigate to the Packs view, and enable the pack corresponding to the Lookup Table that's missing.
- For example, if you don't see the table greynoise_riot_basic, then enable the GreyNoise Basic pack.
- Navigate to the Enrichment section in the Panther Console and confirm that the Lookup Tables appear there.
If desired, you can safely disable the GreyNoise pack after doing this. This will disable any GreyNoise managed detections, but you will still be able to use the tables.
This issue can occur if GreyNoise was not configured during account setup.