Security Operations Integrations - Get Network Statistics flow
The Security Operations Integrations - Get Network Statistics flow retrieves a list of active network connections from a host or endpoint.
Before you begin
Role required: sn_si.analyst
About this task
This flow runs automatically when a configuration item is added to a security incident.
Image omitted: get-network-statistics-flow.png
Security Operations Integrations - Get Network Statistics flow
Security Operations Integrations - Get Network Statistics flow
Actions specific to this flow are described here. For more information on other actions, see Common Security Operations integration flows and orchestration activities.
The flow actions include:
- Capability - Determine CIs activity
.
- Execution Tracking - Begin (CIs) Flow Action
The Execution Tracking - Begin (CIs) flow action starts the auditing process for a Security Operations Integration flow that operates on configuration items (CIs).
Parent Topic:Security Operations Integration- Get Network Statistics capability