Perform a manual action

Supported in:

Both the manual actions and the actions that appear in the playbook are populated after you download the corresponding integration in the Google Security Operations Marketplace.

To perform a manual action, complete the following steps:

  1. In the selected case, click manualactionicon Manual Action; the Manual Action dialog appears.
  2. Select the required action. For example, select VirusTotalV3 > Enrich URL. Complete the required information.
  3. Select the alerts and entities you want the action to run on.
  4. Click Execute; the action details appear on the case wall.

Need more help? Get answers from Community members and Google SecOps professionals.