GreyNoise Lookup Tables not listed as Enrichment sources in Panther

Last updated
Save as PDF

Issue

When trying to set up GreyNoise (Basic or Advanced), you don't see the GreyNoise Lookup Tables listed in the Enrichment Sources section of your Panther Console.

Resolution

To resolve this issue:

In the Panther Console, navigate to the Packs view, and enable the pack corresponding to the Lookup Table that's missing.
- For example, if you don't see the table greynoise_riot_basic, then enable the GreyNoise Basic pack.
Navigate to the Enrichment section in the Panther Console and confirm that the Lookup Tables appear there.

If desired, you can safely disable the GreyNoise pack after doing this. This will disable any GreyNoise managed detections, but you will still be able to use the tables.

Cause

This issue can occur if GreyNoise was not configured during account setup.