Documentation
CasesInvestigation Hub

Lookup Enrichments

Run lookup enrichers against records already in the case.

Lookup Enrichments is for enrichers that query existing hunt records rather than files in a package.

FieldMeaning
StatusPending, running, done, or failed.
Record countHow many records the run touched.
StartWhen the run began.
DurationHow long the run took.

Create a lookup run after processing has produced records. Choose the lookup enricher, then submit. Watch this tab instead of Processing Runs for lookup-only work.

See Enrichers.