How can an individual asset action be manually started?
An individual asset action can be manually started with the > action button in the Investigation page. This allows the user to select an asset and an action to perform on it. The other options are not valid ways to start an asset action manually. SeePerforming asset actionsfor more information. Individual asset actions in Splunk SOAR can be manually initiated from the Investigation page of a container. The '> action' button on this page allows users to execute specific actions associated with assets directly, enabling on-the-fly operations on artifacts or indicators within a container. This feature is particularly useful for ad-hoc analysis and actions, allowing analysts to respond to or investigate specific aspects of an incident without the need for a full playbook.
Lucina
10 hours agoLynna
6 days agoRegenia
11 days agoRodney
16 days agoLashandra
2 months agoNoemi
2 months agoBrandon
2 months agoCecilia
3 months agoPete
3 months agoRoslyn
3 months agoTherese
3 months agoKate
3 months agoLavera
3 months agoKatheryn
4 months agoDorethea
4 months agoHoney
4 months agoChi
5 months agoStephen
5 months agoYuki
5 months agoJoseph
5 months agoMalcom
5 months agoMickie
6 months agoVerda
6 months ago