Security Operations - Get Running Processes Flow

  • Release version: Yokohama
  • Updated January 30, 2025
  • 1 minute to read
  • The Security Operations - Get Running Processes flow is a high-level flow independent of integrations. It retrieves a list of running processes on a configuration item (CI) from a host. Use it to fulfill an integration, such as Carbon Black, or for a Windows-based security incident.

    Role required: sn_si.analyst
    Figure 1. Get Running Processes
    Security Operations - Get Running Processes Flow
    Activities specific to this flow are described here. For more information on other activities, see Common Security Operations integration flows and orchestration activities.