Security Incident Response- Get Network Statistics flow

  • Freigeben Version: Australia
  • Aktualisiert 12. März 2026
  • 1 Minute Lesedauer

    • The Security Incident Response > Get Network Statistics flow retrieves the network statistics for an affected Windows-based resource when added to a security incident in the Analysis state.

    Vorbereitungen

    Role required: sn_si.analyst

    Warum und wann dieser Vorgang ausgeführt wird

    For new security incidents that contain configuration items, the flow runs automatically when the state changes to Analysis.

    Existing security incidents are automatically updated when you are in the Analysis state and you add a new configuration item.

    Abbildung : 1. Get Network Statistics
    Get Network Statistics flow
    The flow process actions include:

    Prozedur

    1. Open a security incident.
    2. Update the State to Analysis, if necessary.
    3. Add a configuration item (computer, server, or similar).
    4. Click Update.
      Security Incident Response Orchestration provides network statistics information in the Related Links > Security Incident Enrichments tab. For more information see, Security Operations enrichment data mapping.

      Actions specific to this flow are described here. For more information on other actions, see Common Security Operations integration flows and orchestration activities.