The Threat Lookup - VirusTotal and CrowdStrike Falcon intelligence workflow performs a lookup on selected observables. If the observables are of a type recognized by VirusTotal and as well as CrowdStrike, the observables are scanned for malware, and the results are returned.