Security Operations Integration - Publish to Watchlist Flow

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 1분

    • The Security Operations Integrations - Publish to Watchlist flow is a high-level flow independent of integrations. It adds observables to third-party watchlist that support the capability. Use it to fulfill an integration.

    시작하기 전에

    Role required: sn_si.analyst

    이 태스크 정보

    This flow is visible and runs only when an integration is available. It is triggered from the Observables or Associated Indicators tab on a security incident.

    그림 1. Publish to Watchlist
    Security Operations Integration - Publish to Watchlist capability flow

    Activities specific to this flow are described here. For more information on other activities, see Common Security Operations integration flows and orchestration activities.