Security Operations - Get Running Processes Flow

The Security Operations - Get Running Processes flow is a high-level flow independent of integrations. It retrieves a list of running processes on a configuration item (CI) from a host. Use it to fulfill an integration, such as Carbon Black, or for a Windows-based security incident.

Role required: sn_si.analyst

Figure 1. Get Running Processes

Activities specific to this flow are described here. For more information on other activities, see Common Security Operations integration flows and orchestration Flow Actions.