Trigger a FireEye Capability profile from Configuration Item related list

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read

    • Trigger a capability profile manually from the configuration item related list.

    Before you begin

    Role required: sn_si.admin, sn_si.analyst

    Procedure

    1. Navigate to Security Incidents > Show All Incidents.
    2. Select the security incident that you want to review with the FireEye HX information.
    3. Click Show all related lists in the related lists section.
    4. Click the Configuration Item related list.
      Configuration Item list view.
    5. Click Edit to add the available configuration items, if values are not already present, and click Save.
      Edit Member view: Selecting additional configuration items.
    6. Select the added configuration item(s), and from the Actions on selected rows, select a capability.
      Actions on selected rows form button: selecting a capability as per your preference.
    7. The selected capability is triggered manually.
    8. Review the work notes and activities section.
    9. View the tags, and check the data in the related lists.