The InsightConnect team is happy to announce the launch of our newest feature, Quick Actions!
With Quick Actions, you will now be able to run simple yet powerful automated actions from InsightConnect with no setup required. That’s right: the initial set of actions we will be releasing will not require Orchestrators, Connections, Workflows or anything of the like. Simply log into the product, enter some input and start automating!
With our initial release, Quick Actions will be available on the InsightConnect Home page and the first action supported will be to Lookup an IP Address with WHOIS.
This feature will have a Beta flag as we plan to rapidly add additional actions as well as make Quick Actions more accessible throughout the product.
We would love to hear about how you might use this and get any feedback that you have!
What kind of actions would you put here? Would you like this functionality anywhere else in the platform?
Does what it says, nice, clean. Thx.
For you next trick, it’d be nice feature to also get internal IP info.
It’s the internal ones which can be difficult to lookup on the fly, ie. have to connect to VPN, etc.
NSLOOKUP / DIG / tracert sorta thing.
Thanks for the feedback @jacob_r!
We actually have some near term plans to add more actions and one of them will be using our DNS plugin which uses DIG.
Any other actions you think would be useful(even if they have nothing to do with IP addresses)?
It would be awesome to have a feature like this present throughout the rest of the Insight platform in the form of some sort of toolbar or maybe a browser extension that can leverage the API. It’d certainly help with launching workflows that require a bit of an extra nudge from the IDR side.
That may or may not be on the roadmap.
DNS search, maybe w a little VT added in?
Lots of potential here, keep up the awesome work folks! It breaks the concept of “no config needed”, but it would be really cool if I could use that same toolbar to execute a custom workflow as well (Now that I’m writing it… probably a lot more effort needed to make that configurable by end users, but I could see it fitting well with the parameters feature)
Also, this might be a good place to stash a “Rerun recently failed jobs” button, with a dropdown that lets me select from the last N failed jobs.
@heather_hall – we are going to be adding DNS searches soon . We will look into adding VT as well. Thank you for the feedback!
@matt_domko_deprecated – We REALLY want to evolve the Quick Actions service to get to workflow execution as well. As you’ve rightly pointed out, definitely gets a little more involved to enable that functionality but it’s in our plans. We will definitely keep the community here in the loop as we look to get into the next phases of Quick Actions! Might need a few friends to help us test and make sure we get the experience right!
Stay tuned and keep the ideas flowing!!
@matt_domko_deprecated what types of workflows would you see yourself running from this experience?
Mostly one-off tasks, or scheduled workflows I want to kickoff early:
- Get github audit logs since $date
- Get asset context (find jira tickets, asset owner [email, title, recent tickets for owner])
- Get user context (find assets, jira tickets, email, title, recent security events)
- Rotate all credentials for $username
- Kickoff an InsightVM scan of a new AWS AMI
- Rerun a recently failed job (once I find an API and make a plugin for it )
More Quick Action Suggestions: Generate InsightVM SQL Report
(There’s already a plugin that will let me generate an adhoc report… I just wish I could quick action it… to be fair, I could setup a webhook workflow and manually run it…)
Scenario: I just loaded a bunch of assets into InsightVM and my scans are done. I’d like to quickly run a SQL report on them.