This option is available when you right-click any context meta in the Investigate, Respond, Users, and Hosts view where Context Highlights appear.

What do you want to do?

User Role I want to ... Show me how
Analysts Perform Quick Actions Quick Actions

Related Topics

Quick Look

The following is an example of Quick Action from the Respond view.

124_INC53ref_0224.png

The following figures shows the Quick Actions workflow.

124_quick action_0224 img_1019x364.png

124_quickactionref_0224.png

The following table describes the fields in the Quick Actions Panel.

Fields Description
Search Allows you to quickly search for the specific meta value.
Action History Allows you to view the historical details of the Response Actions executed for that specific meta value.
Continue Allows you to continue the configuration.
Parameter Label (Additional IP Address to Block) Allows you to enter the parameter label value, added as part of the Response Actions screen, which is reflected as an Additional IP Address to Block field in the Quick Actions panel. For example,1.1.1.0/24
Comments Allows you to enter the comments while executing the Response Action.
Cancel Closes the dialog without applying changes.
Back Allows to navigate back to the previous screen.
Confirm Applies the changes.

Quick Actions History View

When you click the Action History option in the Quick Actions window, the Quick Action History dialog displays the historical details of the Response Actions executed for that specific meta value.

124_quickactionreff_0224.png

124_quickactionrefff_0224.png

The following table describes the columns in the Quick Action History view.

Columns Description
Executed On Displays the date and time when the Response Action was last executed. For example: 12/11/2023 05:06 am
Name Displays the name of all the Response Actions executed.
Connector Displays the name of the third-party tool for which the particular Response Action was executed. For example, ThreatConnect
Comment Displays the comment provided while executing the Response Action.
Executed By Displays the name of the user who executed the Response Action last time.
Status Displays the status of the execution of Response Action. For example, Success and Failure.