Verify CrowdStrike Falcon Insight profile trigger conditions

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：1分

    • Test the profile and verify that the trigger condition filters that you have configured work as expected.

    始める前に

    Role required: sn_si.admin

    このタスクについて

    Activate the profile that is based on the configured trigger conditions you specified so that you can view the query results in the ServiceNow AI Platform security incidents.

    手順

    1. Navigate to All > Security Incidents > Show All Incidents.
    2. Select New to create a security incident.
    3. To create a security incident, fill in the required information and click Save.
    4. Review the work notes and activities section to view the profile-initiated and profile-completed tags.Reviewing work notes for automation activity.
    5. Review the details in the CrowdStrike Falcon Insight Details related lists such as Get File, Host Details, Logged on Users, Running Processes, Running Services, Network Statistics, and so on.
      Review therelated lists for details.