GreyNoise helps security analysts save time by revealing which events and alerts they can ignore. Use the GreyNoise integration to run queries, list tags, check IP activity, and get IP details in Torq workflows.
Get your GreyNoise API key
When you create the Greynoise integration in Torq, you'll need your Greynoise API key.
Log in to your GreyNoise portal.
Go to Account.
Copy your API key.
Create a GreyNoise Integration in Torq
The GreyNoise integration in Torq holds your GreyNoise API key and is used to authenticate the steps.
Go to Build > Integrations > Steps > GreyNoise and click Add.
Give the integration a meaningful name.
Enter your GreyNoise API key.
Click Add.
Premade Steps
Check IP address activity
Check multiple IP addresses' activity
Get aggregate statistics for a query
Get IP address details
Get multiple IP address details
List tags
Run a query
Search an IP address in RIOR