Trigger a FireEye Capability profile from Configuration Item related list

Trigger a capability profile manually from the configuration item related list.

始める前に

Role required: sn_si.admin, sn_si.analyst

手順

1. Navigate to Security Incidents > Show All Incidents.
2. Select the security incident that you want to review with the FireEye HX information.
3. Click Show all related lists in the related lists section.
4. Click the Configuration Item related list.

   

5. Click Edit to add the available configuration items, if values are not already present, and click Save.

   

6. Select the added configuration item(s), and from the Actions on selected rows, select a capability.

   

7. The selected capability is triggered manually.
8. Review the work notes and activities section.
9. View the tags, and check the data in the related lists.