This option is available when you right-click any context meta in the Investigate, Respond, Users, and Hosts view where Context Highlights appear.
What do you want to do?
User Role | I want to ... | Show me how |
---|---|---|
Analysts | Perform Quick Actions | Quick Actions |
Related Topics
Quick Look
The following is an example of Quick Action from the Respond view.
The following figures shows the Quick Actions workflow.
The following table describes the fields in the Quick Actions Panel.
Fields | Description |
---|---|
Search | Allows you to quickly search for the specific meta value. |
Action History | Allows you to view the historical details of the Response Actions executed for that specific meta value. |
Continue | Allows you to continue the configuration. |
Parameter Label (Additional IP Address to Block) | Allows you to enter the parameter label value, added as part of the Response Actions screen, which is reflected as an Additional IP Address to Block field in the Quick Actions panel. For example,1.1.1.0/24 |
Comments | Allows you to enter the comments while executing the Response Action. |
Cancel | Closes the dialog without applying changes. |
Back | Allows to navigate back to the previous screen. |
Confirm | Applies the changes. |
Quick Actions History View
When you click the Action History option in the Quick Actions window, the Quick Action History dialog displays the historical details of the Response Actions executed for that specific meta value.
The following table describes the columns in the Quick Action History view.
Columns | Description |
---|---|
Executed On | Displays the date and time when the Response Action was last executed. For example: 12/11/2023 05:06 am |
Name | Displays the name of all the Response Actions executed. |
Connector | Displays the name of the third-party tool for which the particular Response Action was executed. For example, ThreatConnect |
Comment | Displays the comment provided while executing the Response Action. |
Executed By | Displays the name of the user who executed the Response Action last time. |
Status | Displays the status of the execution of Response Action. For example, Success and Failure. |