When it comes to handling security events we understand that speed and consistency are key. That is why we created a product to help automate security tasks in the first place! We also understand that logging and tracking actions that are being taken is important as well. After an event, you will likely want to verify that all of the appropriate actions were taken, you will want to see who performed the action, and what the actual outcome of the action was.
With these facts in mind, we are excited to announce the release of our new Quick Action page in InsightConnect!
The Quick Actions page features two tabs, Actions and History. The Actions tab will list out your available actions and allow you to run whatever Quick Action you would like by simply clicking on the appropriate card, enabling faster discovery and execution of Quick Actions!
The History tab will display a list of previously run actions allowing you to see which have been run, who has run the actions, and what the inputs and outputs of each action were at the time of execution so that you can confidently see and understand what actions are being taken in your environment. One note here is that actions were ephemeral until recently so you will not see all of your executed actions prior to this release.
As always, let us know what you think!