To see which workflows you can run to take action against a threat in your environment, open an alert and select the Respond tab.
Important
To have access to this feature, you must be a Trellix Hyperautomation customer.
You can run a maximum of 100 workflows each day. The quota is reset at midnight.
To run a workflow:
On the Respond tab, find the workflow you want to run and select More Options
.png "more-options.png")
> Run.
You can also add non-scheduled workflows and configure them to run if the same rule triggers an alert in the future.
To add a non-scheduled workflow:
On the Respond tab, click Add Action.
Locate the row with the workflow you want to add and click Configure Action.
Note
You can only add a published workflow.
If prompted, configure the input parameters.
To run the workflow immediately, click Save and Run. To run the workflow manually later, click Save.