Security Operations
Automation Runs
๐Ÿ”Ž
โ“

Automation Runs

Every automation evaluation, dry-run and execution.
RunRuleTriggerStatusModeIncidentPlanned actionsExecutedStarted
RUN-5D92FF28A2 Ransomware Impact Response incident Completed approval required INC-01002 notify_soc, collect_investigation_package, block_indicator, isolate_device notify_soc: awaiting_approval collect_investigation_package: awaiting_approval block_indicator: awaiting_approval isolate_device: awaiting_approval 2026-10-21 03:52
RUN-AB5D0557D7 High Risk Device SOC Alert incident Completed automatic INC-01001 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-21 03:51
RUN-755F9E5783 Persistence & Defense Evasion Response incident Completed approval required INC-01001 investigate, collect_investigation_package, run_hunting_queries, notify_soc, block_indicator investigate: awaiting_approval collect_investigation_package: awaiting_approval run_hunting_queries: awaiting_approval notify_soc: awaiting_approval block_indicator: awaiting_approval 2026-10-21 03:46
RUN-8BF5A695E2 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 03:21
RUN-BFCDBDBB51 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 03:21
RUN-BE2667BA1D Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 03:19
RUN-0CC126775E Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 03:19
RUN-188A539401 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 03:18
RUN-CA4EB01797 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 03:18
RUN-D48274F2DA Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 03:18
RUN-8C61AF277A Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 03:17
RUN-1D9BEEB156 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 03:17
RUN-CD3F06497B Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 03:17
RUN-5A524D4C57 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 03:11
RUN-D0EF02A000 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 03:08
RUN-5F12751167 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 03:07
RUN-683F4663EF High Risk Device SOC Alert incident Completed automatic INC-01003 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-21 03:03
RUN-3A6CDC3839 Lateral Movement Investigation incident Dry Run recommend INC-01003 run_hunting_queries, collect_evidence, notify_teams - 2026-10-21 02:59
RUN-8650E8756F Ransomware Impact Response incident Completed approval required INC-01002 notify_soc, collect_investigation_package, block_indicator, isolate_device notify_soc: awaiting_approval collect_investigation_package: awaiting_approval block_indicator: awaiting_approval isolate_device: awaiting_approval 2026-10-21 02:52
RUN-ABA9910460 High Risk Device SOC Alert incident Completed automatic INC-01001 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-21 02:50
RUN-949A5B7744 Persistence & Defense Evasion Response incident Completed approval required INC-01001 investigate, collect_investigation_package, run_hunting_queries, notify_soc, block_indicator investigate: awaiting_approval collect_investigation_package: awaiting_approval run_hunting_queries: awaiting_approval notify_soc: awaiting_approval block_indicator: awaiting_approval 2026-10-21 02:45
RUN-C2833645C8 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 02:20
RUN-98B757B5B2 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 02:20
RUN-E67D6E426B Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 02:18
RUN-CEE93C72E0 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 02:18
RUN-8B9FD1C459 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 02:17
RUN-A75E15FE3B Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 02:17
RUN-DAB2A9D6E7 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 02:17
RUN-FB4F6B3A3C Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 02:16
RUN-5D42E5680B Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 02:16
RUN-7B76090A5A Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 02:16
RUN-FC1A9536D6 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 02:10
RUN-D582545E61 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 02:07
RUN-4C2E7B0DEB Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 02:06
RUN-0DC6B1ED3A High Risk Device SOC Alert incident Completed automatic INC-01003 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-21 02:02
RUN-A1EA991731 Lateral Movement Investigation incident Dry Run recommend INC-01003 run_hunting_queries, collect_evidence, notify_teams - 2026-10-21 01:58
RUN-A2D5209B6B Ransomware Impact Response incident Completed approval required INC-01002 notify_soc, collect_investigation_package, block_indicator, isolate_device notify_soc: awaiting_approval collect_investigation_package: awaiting_approval block_indicator: awaiting_approval isolate_device: awaiting_approval 2026-10-21 01:51
RUN-953C157B7A High Risk Device SOC Alert incident Completed automatic INC-01001 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-21 01:50
RUN-1AADD20547 Persistence & Defense Evasion Response incident Completed approval required INC-01001 investigate, collect_investigation_package, run_hunting_queries, notify_soc, block_indicator investigate: awaiting_approval collect_investigation_package: awaiting_approval run_hunting_queries: awaiting_approval notify_soc: awaiting_approval block_indicator: awaiting_approval 2026-10-21 01:44
RUN-012282E738 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 01:20
RUN-45B86A0240 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 01:20
RUN-5FAF275868 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 01:17
RUN-02B229FC54 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 01:17
RUN-BF27BFE18F Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 01:16
RUN-D27E344761 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 01:16
RUN-049534285F Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 01:16
RUN-B289EA0201 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 01:15
RUN-8CF731717F Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 01:15
RUN-0DC96E1D7C Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 01:15
RUN-AD40E8842A Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 01:10
RUN-312C81547E Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 01:07
RUN-B3CF680DCD Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 01:05
RUN-BB0BC2EFFD High Risk Device SOC Alert incident Completed automatic INC-01003 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-21 01:01
RUN-24EE79CA99 Lateral Movement Investigation incident Dry Run recommend INC-01003 run_hunting_queries, collect_evidence, notify_teams - 2026-10-21 00:58
RUN-6284E9BADA Ransomware Impact Response incident Completed approval required INC-01002 notify_soc, collect_investigation_package, block_indicator, isolate_device notify_soc: awaiting_approval collect_investigation_package: awaiting_approval block_indicator: awaiting_approval isolate_device: awaiting_approval 2026-10-21 00:50
RUN-65DF6CB2AF High Risk Device SOC Alert incident Completed automatic INC-01001 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-21 00:49
RUN-768BA2B7CD Persistence & Defense Evasion Response incident Completed approval required INC-01001 investigate, collect_investigation_package, run_hunting_queries, notify_soc, block_indicator investigate: awaiting_approval collect_investigation_package: awaiting_approval run_hunting_queries: awaiting_approval notify_soc: awaiting_approval block_indicator: awaiting_approval 2026-10-21 00:44
RUN-A1D6BC4BA5 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 00:19
RUN-7BC1DFEBBD Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 00:19
RUN-A4E2A24345 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 00:17
RUN-B579DE302F Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 00:17
RUN-8F58698E95 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 00:16
RUN-40624C9F0F Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 00:16
RUN-14E4E1AD4C Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 00:16
RUN-E14A14DF35 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 00:15
RUN-FBD3F65198 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 00:15
RUN-7F3DB3108F Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 00:15
RUN-21C01A18EE Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 00:09
RUN-348B27701D Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-21 00:06
RUN-9CFE88111B Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-21 00:05
RUN-D19DAFCCCE High Risk Device SOC Alert incident Completed automatic INC-01003 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-21 00:01
RUN-90428F694E Lateral Movement Investigation incident Dry Run recommend INC-01003 run_hunting_queries, collect_evidence, notify_teams - 2026-10-20 23:58
RUN-56715406DA Ransomware Impact Response incident Completed approval required INC-01002 notify_soc, collect_investigation_package, block_indicator, isolate_device notify_soc: awaiting_approval collect_investigation_package: awaiting_approval block_indicator: awaiting_approval isolate_device: awaiting_approval 2026-10-20 23:50
RUN-486D1DAAF4 High Risk Device SOC Alert incident Completed automatic INC-01001 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-20 23:49
RUN-560A798769 Persistence & Defense Evasion Response incident Completed approval required INC-01001 investigate, collect_investigation_package, run_hunting_queries, notify_soc, block_indicator investigate: awaiting_approval collect_investigation_package: awaiting_approval run_hunting_queries: awaiting_approval notify_soc: awaiting_approval block_indicator: awaiting_approval 2026-10-20 23:43
RUN-58B38D8BCA Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 23:19
RUN-FF065C0F14 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 23:19
RUN-5F90078140 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 23:17
RUN-3A4EAA2A6B Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 23:17
RUN-1C940B9371 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 23:16
RUN-CE872DAFD8 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-20 23:16
RUN-6081D10792 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 23:15
RUN-CCB78C8B1F Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-20 23:14
RUN-A617515D2D Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 23:14
RUN-77C0FEF242 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 23:14
RUN-B9F8490AC1 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-20 23:09
RUN-FAE0FAA591 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 23:06
RUN-2B95FC2C60 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-20 23:05
RUN-E62953EA83 High Risk Device SOC Alert incident Completed automatic INC-01003 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-20 23:00
RUN-EBC395FDC8 Lateral Movement Investigation incident Dry Run recommend INC-01003 run_hunting_queries, collect_evidence, notify_teams - 2026-10-20 22:57
RUN-E9AE90B66B Ransomware Impact Response incident Completed approval required INC-01002 notify_soc, collect_investigation_package, block_indicator, isolate_device notify_soc: awaiting_approval collect_investigation_package: awaiting_approval block_indicator: awaiting_approval isolate_device: awaiting_approval 2026-10-20 22:49
RUN-4855C62AAD High Risk Device SOC Alert incident Completed automatic INC-01001 notify_teams, update_incident notify_teams: succeeded update_incident: succeeded 2026-10-20 22:48
RUN-47A8ECA803 Persistence & Defense Evasion Response incident Completed approval required INC-01001 investigate, collect_investigation_package, run_hunting_queries, notify_soc, block_indicator investigate: awaiting_approval collect_investigation_package: awaiting_approval run_hunting_queries: awaiting_approval notify_soc: awaiting_approval block_indicator: awaiting_approval 2026-10-20 22:43
RUN-6FA6A7C229 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 22:18
RUN-4193C7CD19 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 22:18
RUN-1E8EAB9A79 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 22:16
RUN-CC9FB0D771 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 22:16
RUN-58044F9DA7 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 22:15
RUN-C3C4C07DC8 Critical Vulnerability Remediation vulnerability Completed approval required - create_ticket, notify_soc, create_remediation_task create_ticket: awaiting_approval notify_soc: awaiting_approval create_remediation_task: awaiting_approval 2026-10-20 22:15
RUN-9BE860D6C6 Exploitable Vulnerability Alert vulnerability Dry Run recommend - notify_teams, create_ticket, create_remediation_task - 2026-10-20 22:15