The Fix Now menu or menus at the top of the Correlations Details page or Threat Details page contain a list of the response actions applicable to that correlation or threat. Executing a response action triggers the playbook associated with that response action.
Note
The red Fix Now menu typically includes critical response actions, while the gray Fix Now menu includes routine response actions.
To select a response action to execute:
Navigate to the Correlations Details or Threat Details page.
Click Fix Now and select a response action.
A dialog box listing all relevant artifacts (MD5 hashes, alerts, domains, IP addresses, and so on) opens. For example:
.png "Helix_ResponseActionExecute.png")
Select at least one artifact and select the "I understand" checkbox.
Click Confirm.