|
About the Workflows category
|
|
0
|
390
|
June 5, 2020
|
|
Microsoft Graph API Integration
|
|
12
|
277
|
February 6, 2026
|
|
Formatting Column Names returned from Surface Command Query
|
|
18
|
98
|
January 29, 2026
|
|
Automated Threat Hunting using InsightConnect
|
|
6
|
1303
|
December 22, 2025
|
|
Cancelling stuck running jobs
|
|
2
|
82
|
December 9, 2025
|
|
Executing IVM query and return json
|
|
4
|
57
|
November 13, 2025
|
|
Want to run workflow on a regular intervals like every 12 hours
|
|
18
|
213
|
November 11, 2025
|
|
SurfaceCommand Query, JQ, and building separate arrays
|
|
3
|
59
|
November 10, 2025
|
|
InsightConnect remediation Hub Jira Workflow
|
|
4
|
75
|
October 28, 2025
|
|
Checking value in array
|
|
4
|
127
|
October 17, 2025
|
|
Teams Chat Automation
|
|
4
|
160
|
September 5, 2025
|
|
Snippet Object Output Depth
|
|
5
|
72
|
August 27, 2025
|
|
"Scan Asset with InsightVM from Microsoft Teams" - Global Artiacts?
|
|
3
|
129
|
July 14, 2025
|
|
"Account disable" automation in a hybrid environment
|
|
15
|
479
|
June 25, 2025
|
|
ICON Send Artifacts to IDR Investigation after Custom Pattern Alert
|
|
6
|
724
|
June 2, 2025
|
|
Automations on GCC High
|
|
1
|
50
|
May 29, 2025
|
|
Alert on New High Risk Vulnerability in InsightVM with Microsoft Teams - workflow error running "Get Vulnerability Content from Rapid7 Vuln DB"
|
|
3
|
137
|
April 23, 2025
|
|
Slack vs. Teams
|
|
3
|
105
|
April 16, 2025
|
|
Need a good after hours snippet example?
|
|
1
|
72
|
April 3, 2025
|
|
ICON Workflow Documentation
|
|
0
|
79
|
April 1, 2025
|
|
Unable to get Incident URL from Microsoft Defender ATP Trigger in Insightconnect
|
|
3
|
549
|
March 27, 2025
|
|
Send only Critical / High alerts to slack
|
|
4
|
113
|
February 20, 2025
|
|
Insight AppSec workflow in ICON
|
|
1
|
57
|
January 27, 2025
|
|
Adding a Clickable URL to Investigation Comments or Details
|
|
3
|
146
|
January 22, 2025
|
|
Can you backfill time and cost savings if you forgot to set the value?
|
|
1
|
89
|
January 8, 2025
|
|
IDR Alert Teams Plugin requiring LDAP and NTLM Creds
|
|
1
|
97
|
December 30, 2024
|
|
Quick Action for Geolocation
|
|
3
|
63
|
November 27, 2024
|
|
Active Response containment actions/workflow for a user account in breach are insufficient
|
|
1
|
625
|
February 8, 2024
|
|
Insight Connect Workflow
|
|
1
|
151
|
November 4, 2024
|
|
Best way to dedupe an array?
|
|
3
|
109
|
October 22, 2024
|