The Actions panel lists response actions recommended by the Investigation Agent. Review an action's details and impact before executing it.
Each action includes its ID, name, description, integrations, affected assets, and impact. The impact describes the consequence of executing the action. Some actions cannot be reversed.
To execute an available action, select Execute. Review the confirmation message and any warning about an irreversible action. Add an optional note and confirm the action. The action status changes to In Progress.
To perform another action, select the three-dot menu next to the action:
Reject — Reject an available action.
Create Ticket — Create a ticket for the action in a connected ticketing tool. Select the ticketing tool, project, and issue type. Assign an owner, add notes, and select Create.
Escalate — Send the action for manager review before it is executed.
Stop — Stop an action that is in progress. Add an optional note and confirm.
If you do not have permission to execute an action, Trellix Wise™ for Private Cloud changes the action status to Needs Escalation and routes the action to the manager review queue. The manager can execute or reject the action.