---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/security-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Activity Definitions

# Activity Definitions {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 min. de leitura

The ServiceNow AI Platform provides a few activity definitions within the base
system. In addition, for the playbooks that SIR Workspace base system, there are a few
activity definitions defined in the base system under Enterprise Security Case Management
PAD Commons application.
Role required: sn_si.admin.

Here's the list of activity definitions that are a part of the base system:
{#build-activities__table_jnm_4j1_1vb__entry__4}

| Activity Definition | Table | Description | Application |
|-|-|-|-|
| Wait For Condition with No Experience | Global\[global\] | Wait for Condition with no experience | Enterprise Security Case Management PAD Commons |
| Submit to CSF X Sandbox | Security Incident \[sn_si_incident\] | Submit to sandbox | Enterprise Security Case Management PAD Commons |
| Send Email | Security Incident \[sn_si_incident\] | Send email activity for SIR playbooks. | Enterprise Security Case Management PAD Commons |
| Search Email | Security Incident \[sn_si_incident\] | Search emails on email server | Enterprise Security Case Management PAD Commons |
| Update Task State | Security Incident \[sn_si_incident\] | Update the task state | Enterprise Security Case Management PAD Commons |
| Delete Email | Security Incident \[sn_si_incident\] | Delete emails | Enterprise Security Case Management PAD Commons |
| Yes No Outcome | Task \[task\] | Expected outcome | Enterprise Security Case Management PAD Commons |
[ ]

{#build-activities__table_jnm_4j1_1vb}
* **[Example Activity Definition: Send email](https://servicenow-prod.fluidtopics.net/ewfgwhmg3IcxB5j~OxHWyg)**   
  The following is an example of Send email activity definition.
* **[Submit to CSF X Sandbox](https://servicenow-prod.fluidtopics.net/ZG8XLmQFvvmt5Dxz7hQY8w)**   
  Submit to CSF X Sandbox is an example of an activity definition process.

**Conceitos relacionados**   

* [Working with Security Incident Records](https://servicenow-prod.fluidtopics.net/F4gMuBaPzFZ_aDIzN95bcQ "The Security Incident Record consists of the following.")
* [Security Incident Playbook](https://servicenow-prod.fluidtopics.net/j9UN_hWRafCEE93SHgmtAA#security-incident-playbook "Invoke the security incident playbook flow automatically or manually.")
* [Prerequisites for the Playbooks](https://servicenow-prod.fluidtopics.net/lpW6hmPN~SSkIXeXs3b~6A "You need the following roles and plugins to build the Playbooks.")
* [Rebuilding existing playbooks in Workflow Studio](https://servicenow-prod.fluidtopics.net/erTfCdHPbyWftx4JgwV7IQ "You can’t convert existing flows directly into playbooks in Workflow Studio. Each flow designer step that creates a response task to guide the analyst must be broken down into separate actions or subflows.")
* [Sample Playbooks for SIR Workspace](https://servicenow-prod.fluidtopics.net/KhT8YFJMWHmgExnX55FXrg "You can create or configure playbooks for SIR Workspace quickly and easily without writing complicated code. You can use these playbooks to resolve security threats in a step-by-step manner. You can invoke the security incident playbook flow automatically or manually.")
* [Working with MSI Records](https://servicenow-prod.fluidtopics.net/hNLFK~rdtwvK2esi0XJS0w "Using the Security Incident Response workspace, you can propose, promote, or link security incidents as major security incidents when the incidents are identified as critical threat to the organization.")
* [Working with Form UI actions](https://servicenow-prod.fluidtopics.net/V_pw8Q_XTs5rZDomvJHEQA "Following are the UI actions that are displayed on the security incident form.")  
**Tarefas relacionadas**   

* [Security Incident Closure workflow](https://servicenow-prod.fluidtopics.net/KkzHWr_3mlRQufWNUiQWUw "Close the security incident by updating the incident state.")
* [Handle security incidents using Advanced Work Assignment](https://servicenow-prod.fluidtopics.net/brm1MswqOWh2X3qqJ856mg "Handle security incidents assigned to you in SIR Workspace using Advanced Work Assignment.")