Run Block Request

Blocks communication with observables associated with a security incident.

Before you begin

Role required: sn_si.analyst

About this task

Note:

If no implementations are available, capability actions are not displayed in product menus.

The Security Operations Integration - Block Request flow can be triggered from an observable form, or from the Security Incident Observables related list on a security incident.

This example shows a Block Request from a security incident.

Procedure

1. Navigate to a security incident.
2. Select observables from the Related List tab.
3. Click Block Request in the Actions on selected rows... drop-down menu.

   

   The dialog box appears.

   

4. Choose the implementation.
5. Click Block.
   The flow execution audit is displayed in the work notes section.