How can an individual asset action be manually started?
An individual asset action can be manually started with the > action button in the Investigation page. This allows the user to select an asset and an action to perform on it. The other options are not valid ways to start an asset action manually. SeePerforming asset actionsfor more information. Individual asset actions in Splunk SOAR can be manually initiated from the Investigation page of a container. The '> action' button on this page allows users to execute specific actions associated with assets directly, enabling on-the-fly operations on artifacts or indicators within a container. This feature is particularly useful for ad-hoc analysis and actions, allowing analysts to respond to or investigate specific aspects of an incident without the need for a full playbook.
Lashandra
15 days agoNoemi
20 days agoBrandon
26 days agoCecilia
1 month agoPete
1 month agoRoslyn
1 month agoTherese
2 months agoKate
2 months agoLavera
2 months agoKatheryn
2 months agoDorethea
2 months agoHoney
2 months agoChi
3 months agoStephen
3 months agoYuki
4 months agoJoseph
4 months agoMalcom
4 months agoMickie
4 months agoVerda
4 months ago