Update security incident with lookup results workflow

The Update security incident with lookup results workflow updates existing security incidents with lookup results.

Before you begin

Role required: sn_si.basic

About this task

This workflow is triggered by a business rule on the lookup table which monitors when the Result field changes to Failed.

Workflow process activities include:

• Roll up lookup info to security incident activity
• Update Task Worknotes activity

Parent Topic:Common Security Operations integration flows and orchestration activities