The Quick Actions option introduced in the Context Highlights section allows users to use the response action configured for any applicable meta and send the meta along with any additional parameters to the third party tool for further processing.

124_quickactions_0224_298x339.png

Note: You can access Quick Actions option when you right click any context meta in Investigate, Respond, Users, and Hosts view where Context Highlights appears. By default, the Quick Actions option is enabled in Context Menu Action Configuration dialog (AdminIcon_20x16.pngAdmin > System > Context Menu Actions > Quick Actions > 124_edit_0224_18x18.png > Context Menu Action Configuration).

Disable Quick Actions Option

If you are not using any connector to take action on any applicable meta, you can disable the Quick Actions option in the Context Menu Action view.

To disable Quick Actions option

  1. Go to AdminIcon_20x16.pngAdmin > System > Context Menu Actions view.

  2. Select Quick Actions and click 124_edit_0224_18x18.png.

  3. Check the Enable field in Context Menu Action Configuration dialog.

  4. Click Save.

Enable Quick Actions Option

If you have disabled the Quick Actions option in Context Menu Action Configuration dialog, you can re-enable the option.

To enable Quick Actions option

  1. Go to AdminIcon_20x16.pngAdmin > System > Context Menu Actions view.

  2. Select Quick Actions and click 124_edit_0224_18x18.png.

  3. Check the Enable field in Context Menu Action Configuration dialog.

  4. Click Save.

Execute Quick Actions Option

You can take a quick action on any applicable meta in Respond, Users, Investigate, and Hosts view.

To take a Quick Action on the applicable meta

  1. Create Response Action for the applicable meta in the Create Response Action view.

  2. Right click the meta in Respond, Users, Investigate, or Hosts view.

    The Context Highlights section is displayed.

    124_quickactions_0224_230x261.png

  3. Select the Quick Actions option.

    The Quick Actions window is displayed.

    Quick Actions for ThreatConnect:

    125_QuickActionCustomThreatConnect_0724.PNG

    Quick Actions for CrowdStrike: 
    125_ReponseActionQuickActionsCrwdStrknew_0724.PNG 
    Quick Actions for CrowdStrike through ThreatConnect: 
    125_ReponseActionQuickActionsCrwdStrkThrtCnnct_0724.PNG

  4. Select the required Response Action and click Continue.

  5. Enter the additional parameters information, if any. 

    Note: This is applicable only if you have created custom Response Actions for ThreatConnect.

    Note: For more information on how to add the additional parameters information in the Quick Actions window, see Response Actions and Quick Actions Use Case Examples.

  6. Enter the comments and click Confirm.