About the Enforcement Action Library

As part of an Enforcement Set configuration, you need to define the Main Enforcement Action. You can also add additional actions to be performed after execution of the main action.

This index lists all available Enforcement Actions supported.

Click the blue square at the top corner of the table and use the Search box to search for Enforcement Actions.

Action Name	Category	Adapter
6clicks - Report Test Result	Notify	6clicks
Amazon Web Services (AWS) - Send CSV to S3	Notify	AWS
Amazon Web Services (AWS) - Send JSON to S3	Notify	AWS
Axonius - Push System Notification	Notify	Axonius
Axonius - Send Email	Notify	Axonius
AWS - Delete Files From S3 Bucket	Notify	AWS
Box - Send CSV	Notify	Box (Various Vendors)
CSV - Send to SCP	Notify	SCP (Various Vendors)
CSV - Send to SFTP	Notify	SFTP (Various Vendors)
CSV - Send to Share	Notify	(Various Vendors)
HTTPS Log Server - Send Log Message	Notify	HTTPS Log Server (Various Vendors)
HTTP Server - Send to Webhook	Notify	HTTPS Server (Various Vendors)
Microsoft Azure - Send Assets to Microsoft Power BI (Send Data to Power BI)	Notify	Microsoft Azure
Microsoft Azure - Send CSV to Azure Storage	Notify	Microsoft Azure
Microsoft Azure - Send CSV to Microsoft OneDrive	Notify	Microsoft Azure
Microsoft Azure - Send JSON to Azure Storage	Notify	Microsoft Azure
Microsoft Fabric - Send Assets to Lakehouse	Notify	-
SentinelOne - Send Broadcast Message	Notify	SentinelOne
SharePoint - Send CSV	Notify	SharePoint
Slack - Send Message via Webhook	Notify	Slack
Slack - Send Message to Channel	Notify	Slack
Snow Software Asset Management - Send Software XML to SCP	Notify	Snow Software Asset Management
SQL - Send Assets to Table	Notify	Notify
SQL - Update Assets in Table	Notify	Notify
SumoLogic - Send Activities to SumoLogic SIEM	Notify	Sumo Logic
Syslog Server - Send Log Message	Notify	Syslog Server
Axonius - Send Email per Asset	Notify per Asset	Axonius
Axonius - Send Email to Assets	Notify per Asset	Axonius
Google Workspace - Send Direct Message to a User	Notify per Asset	Google Workspace (G Suite)
Microsoft Teams - Send Direct Message to Assets	Notify per Asset	Microsoft Teams
Microsoft Teams - Send Direct Message to a User	Notify per Asset	Microsoft Teams
Microsoft Teams - Send Direct Message to a Channel	Notify per Asset	Microsoft Teams
Microsoft Teams - Send Message	Notify per Asset	Microsoft Teams
Slack - Send Direct Message to Assets	Notify per Asset	Slack
Slack - Send Direct Message to a User	Notify per Asset	Slack
Zoom - Send Message	Notify per Asset	Zoom
Admin By Request - Approve or Deny Ticket	Create Incident or Ticket	Admin by Request
Adobe Workfront - Create Issue	Create Incident or Ticket	Adobe Workfront
Bitbucket - Create Pull Request	Create Incident or Ticket	Bitbucket
BMC Helix Remedy - Create Ticket	Create Incident or Ticket	BMC Helix Remedy
BOSSDesk - Create Ticket	Create Incident or Ticket	BOSSDesk
CA Service Management - Create Ticket	Create Incident or Ticket	CA Service Management
ChangeGear - Create Incident	Create Incident or Ticket	ChangeGear
Cherwell - Create Incident (Cherwell IT Service Management)	Create Incident or Ticket	Cherwell
Cherwell - Create Incident per Asset (Create Cherwell Incident per Entity) (Cherwell IT Service Management)	Create Incident or Ticket	Cherwell
Claroty xDome - User Actions	Create Incident or Ticket	Claroty xDome
Demisto - Create Incident per Asset	Create Incident or Ticket	Demisto
Freshservice - Create Ticket	Create Incident or Ticket	Freshservice
Freshservice - Create Ticket per Asset	Create Incident or Ticket	Freshservice
GitHub - Create Issue	Create Incident or Ticket	GitHub
GitHub - Update Issue	Create Incident or Ticket	GitHub
Halo - Create Ticket	Create Incident or Ticket	HaloITSM
Update Fresh Service Ticket	Create Incident or Ticket	Freshservice
IFS Assyst - Create Event per Entity	Create Incident or Ticket	IFS Assyst
Jira Service Management - Create Ticket	Create Incident or Ticket	Jira Service Management (Service Desk)
Jira Service Management - Create Ticket per Asset	Create Incident or Ticket	Jira Service Management (Service Desk)
Jira Service Management - Update Tickets	Create Incident or Ticket	Jira Service Management (Service Desk) adapter
ManageEngine ServiceDesk Plus - Create Request	Create Incident or Ticket	ManageEngine ServiceDesk Plus
ManageEngine ServiceDesk Plus - Create Request per Asset	Create Incident or Ticket	ManageEngine ServiceDesk Plus
Medigate by Claroty - User Actions	Create Incident or Ticket	Medigate
Microsoft Azure DevOps - Create Task	Create Incident or Ticket	Microsoft Azure DevOps
Microsoft Azure DevOps - Update Task	Create Incident or Ticket	Microsoft Azure DevOps
Opsgenie - Create Alert	Create Incident or Ticket	Opsgenie
PagerDuty - Create Incident (Create Incident)	Create Incident or Ticket	PagerDuty
Palo Alto Cortex XSOAR - Create Incident	Create Incident or Ticket	Palo Alto Cortex XSOAR
Salesforce - Create Case (Create Case)	Create Incident or Ticket	Salesforce
ServiceNow - Create Incident	Create Incident or Ticket	ServiceNow
ServiceNow - Create Incident per Asset	Create Incident or Ticket	ServiceNow
ServiceNow - Request Catalog Item	Create Incident or Ticket	ServiceNow
SolarWinds - Create Incident	Create Incident or Ticket	SolarWinds
SolarWinds Web Help Desk - Create Ticket	Create Incident or Ticket	NA
SymphonyAI Summit - Create Ticket	Create Incident or Ticket	SymphonyAI Summit
SymphonyAI Summit - Create Ticket per Entity	Create Incident or Ticket	SymphonyAI Summit
SysAid - Create Incident	Create Incident or Ticket	SysAid
SysAid - Update Ticket	Create Incident or Ticket	Create Incident or Ticket
TeamDynamix - Create Ticket	Create Incident or Ticket	TeamDynamix
TOPdesk - Create Ticket	Create Incident or Ticket	TOPdesk Enterprise Service Management
Update ServiceNow Tickets	Create Incident or Ticket	ServiceNow
Zendesk - Create Ticket	Create Incident or Ticket	Zendesk
Zendesk - Create Ticket Per Entity	Create Incident or Ticket	Zendesk
Update Zendesk Tickets	Create Incident or Ticket	Zendesk
Wrike - Create or Update Task	Create Incident or Ticket	Wrike
Zoho Desk - Create Ticket	Create Incident or Ticket	Zoho Desk
Axonius - Add Custom Data to Assets	Axonius Utilities	Axonius
Axonius - Remove Custom Data from Assets	Axonius Utilities	Axonius
Axonius - Create new case	Axonius Utilities	Axonius
Axonius - Delete Assets	Axonius Utilities	Axonius
Axonius - Delete System Users	Axonius Utilities	Axonius
Axonius - Add or Remove Tag	Axonius Utilities	Axonius
Manage Custom Enrichment - Enrich Assets with CSV File	Axonius Utilities	Axonius
Axonius - Calculate Risk Score	Axonius Utilities	Axonius
Axonius - Export Assets to Instance	Axonius Utilities	Axonius
Axonius - Enrich DNS Custom Data	Axonius Utilities	Axonius
Axonius - Change Alert Status	Axonius Utilities	Axonius
Axonius - Enrich Physical Location	Enrich Asset Data	Axonius
Axonius Network Discovery - Enrich Asset Data	Enrich Asset Data	Axonius
Axonius Network Discovery - Scan	Enrich Asset Data	Axonius
Burp Suite - Run Site Scan	Enrich Asset Data	Burp Suite
Censys - Enrich Asset Data	Enrich Asset Data	Censys
Cisco Support - Enrich Cisco Devices OS with EOL/EOS	Enrich Asset Data
CyberInt - Enrich Asset Data	Enrich Asset Data	CyberInt
Dell TechDirect - Enrich Asset Data (Enrich Data with Dell TechDirect)	Enrich Asset Data	Dell TechDirect
Enrich Asset Data - EPEAT	Enrich Asset Data	EPEAT
Enrich Cisco AMP device using Cisco Orbital	Enrich Asset Data	Cisco Advanced Malware Protection (AMP)
GreyNoise - Enrich Asset Data (Enrich with GreyNoise IO)	Enrich Asset Data	GreyNoise
Have I Been Pwned - Enrich Users' Data	Enrich Asset Data	Have I Been Pwned
Lenovo - Enrich Asset Data	Enrich Asset Data	Lenovo
Make LeanIX Factsheets	Enrich Asset Data	LeanIX
Men&Mice - Subnet Location Enrichment	Enrich Asset Data	Men&Mice DNS Management
Microsoft Defender - Enrich Devices with MDE Client Analyzer Results	Enrich Asset Data	Microsoft Defender for Endpoint (Microsoft Defender ATP)
Microsoft Entra ID (formerly Azure AD) - Enrich User with Microsoft Defender Attack data	Enrich Asset Data	Microsoft Entra ID (formerly Azure AD)
OpenCTI - Enrich Asset Data	Enrich Asset Data	OpenCTI
Portnox CLEAR - Enrich Asset Data	Enrich Asset Data	Portnox CLEAR
Recorded Future - Enrich CVE Data	Enrich Asset Data	Recorded Future
Shodan - Enrich Asset Data	Enrich Asset Data	Shodan
SolarWinds Network Performance Monitor - IPAM Information Enrichment	Enrich Asset Data	SolarWinds Network Performance Monitor
VulnCheck - Enrich CVE data	Enrich Asset Data	NA
WMI - Enrich Devices with DNS Records	Enrich Asset Data	Windows Management Instrumentation (WMI)
Authorize Asset - Tailscale	Enrich Asset Data	Tailscale
Web Server Information - Enrich Asset Data	Enrich Asset Data	Various
WMI - WinRM Scan	Enrich Asset Data	Windows Management Instrumentation (WMI)
Absolute - Unenroll Asset	Manage CMDB Assets	Absolute
Absolute - Update Custom Device Field	Manage CMDB Assets	Absolute
Admin By Request - Delete Computer	Manage CMDB Assets	Admin By Request
Airtable Enterprise - Records Operation	Manage CMDB Assets	Airtable
Akamai Client List - Append, Delete, and Update entries in a list	Manage CMDB Assets
Asset Panda - Create And Update Assets	Manage CMDB Assets	Asset Panda
AssetSonar - Update Asset	Manage CMDB Assets	AssetSonar
BeyondTrust Password Safe - Manage Assets	Manage CMDB Assets	BeyondTrust Password Safe
BigFix Remove Asset	Manage CMDB Assets	BigFix
BMC Atrium - Create or Update Asset	Manage CMDB Assets	BMC Atrium
BossDesk - Create and Update Assets	Manage CMDB Assets	BossDesk
CA Service Management - Create Assets (Create CA CMDA Asset)	Manage CMDB Assets	CA Service Management
Check Point Infinity - Tag Devices that are Publicly Exposed by a FW/NAT Rule	Manage CMDB Assets	Check Point Infinify
Cherwell - Create Assets	Manage CMDB Assets	Cherwell
Cherwell - Remove Assets	Manage CMDB Assets	Cherwell
Cherwell - Update Assets	Manage CMDB Assets	Cherwell
CrowdStrike Falcon - Delete Hosts	Manage CMDB Assets	CrowdStrike Falcon
Datadog - Update Network Device Tags	Manage CMDB Assets	Datadog
Device42 - Create or Update Assets	Manage CMDB Assets	Device42
DigiCert - Renew Certificate	Manage CMDB Assets	N/A
Exabeam - Update Context Table	Manage CMDB Assets	Exabeam
Freshservice - Create Assets	Manage CMDB Assets	Freshservice
Freshservice - Update Assets	Manage CMDB Assets	Freshservice
Halo - Create or Update Device	Manage CMDB Assets	HaloITSM
Halo - Create or Update User	Manage CMDB Assets	HaloITSM
Illumio - Create Workload	Manage CMDB Assets	Illumio
Illumio - Delete Workload	Manage CMDB Assets	Illumio
Illumio - Unpair VEN from Workload	Manage CMDB Assets	Illumio
Illumio Update Workload	Manage CMDB Assets	Illumio
Ivanti - Create Assets	Manage CMDB Assets	Ivanti Service Manager
Ivanti - Update Assets	Manage CMDB Assets	Ivanti Service Manager
Ivanti - Create Software	Manage CMDB Assets	Ivanti Service Manager
Ivanti Unified Endpoint Manager (Landesk) - Create or Update Asset	Manage CMDB Assets	Ivanti Unified Endpoint Manager (Landesk)
Jamf Pro - Add or Remove Assets to/from Computer Group	Manage CMDB Assets	Jamf Pro
Jira Service Management - Create Insight Asset per Asset	Manage CMDB Assets	Jira Service Management
Jira Service Management - Update Insight Asset	Manage CMDB Assets	Jira Service Management
Jira Service Management - Remove Insight Asset	Manage CMDB Assets	Jira Service Management
Kandji - Update Device Blueprint	Manage CMDB Assets	Kandji
ManageEngine ServiceDesk Plus - Create and Update Assets	Manage CMDB Assets	ManageEngine ServiceDesk Plus
Microsoft Entra ID (formerly Azure AD) - Update Windows Defender Security Intelligence	Manage CMDB Assets	Microsoft Entra ID (formerly Azure AD)
Microsoft Intune - Update Device	Manage CMDB Assets	Microsoft Intune
Microsoft MECM (SCCM) - Add or Remove Assets to Collection	Manage CMDB Assets	Microsoft System Center Configuration Manager (SCCM)
Microsoft MECM - Add or Remove Assets to/from Collection (PS-based)	Manage CMDB Assets	Microsoft System Center Configuration Manager (SCCM)
Microsoft MECM - Deploy Package to Devices	Manage CMDB Assets	Microsoft System Center Configuration Manager (SCCM)
MVISION ePO - Add Asset	Manage CMDB Assets	MVISION ePO
Netbox - Connect Contacts to Device	Manage CMDB Assets	Netbox
Netbox - Create or Update Assets	Manage CMDB Assets	Netbox
Netbox - Remove Assets	Manage CMDB Assets	Netbox
Ostendio - Create or Update Ostendio Asset	Manage CMDB AssetsManage Microsoft Azure Services	Ostendio
phpIPAM - Create or Update Assets	Manage CMDB Assets	phpIPAM
PRTG - Add/Remove Tags	Manage CMDB Assets	PRTG Network Monitor
Recorded Future - Add or Remove Assets To/From Watchlist	Manage CMDB Assets	Recorded Future
Send Assets Data - Kovrr	Manage CMDB Assets	Kovrr
Send Assets Data - Snowflake Data Warehouse	Manage CMDB Assets	Snowflake Data Warehouse
ServiceNow - Create Assets	Manage CMDB Assets	ServiceNow
ServiceNow - Update Assets	Manage CMDB Assets	ServiceNow
ServiceNow - Disable or Remove Assets	Manage CMDB Assets	ServiceNow
ServiceNow - Manage Assets with Scripted REST API	Manage CMDB Assets	ServiceNow
Set Unit Count - Gradient	Manage CMDB Assets	Gradient
SharePoint - Create Item In List	Manage CMDB Assets	SharePoint
SharePoint - Delete Item In List	Manage CMDB Assets	SharePoint
SharePoint - Update Item In List	Manage CMDB Assets	SharePoint
SNIPE-IT - Create Asset	Manage CMDB Assets	SNIPE-IT
SolarWinds - Create Asset	Manage CMDB Assets	SolarWinds
Sophos Central - Remove Assets	Manage CMDB Assets	Sophos Central
Splunk - Create and Update Assets	Manage CMDB Assets	Splunk
Splunk - Delete Assets	Manage CMDB Assets	Splunk
SymphonyAI Summit - Create or Update Assets	Manage CMDB Assets	SymphonyAI Summit
SymphonyAI Summit - Create or Update CMDB Assets	Manage CMDB Assets	SymphonyAI Summit
SysAid - Update Assets	Manage CMDB Assets	SysAid
TeamDynamix - Create or Update Asset	Manage CMDB Assets	TeamDynamix
TOPdesk - Create or Update Asset	Manage CMDB Assets	TOPdesk Enterprise Service Management
Trace3 Lamp - Update Device	Manage CMDB Assets	Trace3 Lamp
Trellix ePolicy Orchestrator (ePO) - Add Assets	Manage CMDB Assets	Trellix ePolicy Orchestrator (ePO)
ZenDesk - Create Custom Object per Asset	Manage CMDB Assets	ZenDesk
Cisco Meraki - Provision Client Policy	Update VA Coverage	Cisco Meraki
Cisco Meraki - Update Client Policy	Update VA Coverage	Cisco Meraki
Dynatrace - Add Custom Tag	Update VA Coverage	Dynatrace
Kenna - Add Tags to Assets	Update VA Coverage	Kenna Security Platform
Kenna - Remove Tags from Assets	Update VA Coverage	Kenna Security Platform
Kenna - Replace Tag in Assets	Update VA Coverage	Kenna Security Platform
Nessus - Add IPs to Scan	Update VA Coverage	Tenable Nessus
Nessus - Add Agent to Agent Group	Update VA Coverage	Tenable Nessus
Nessus - Delete Account	Update VA Coverage	Tenable Nessus
Nessus - Delete Agent	Update VA Coverage	Tenable Nessus
Palo Alto Networks Cortex Xpanse - Tag Assets	Update VA Coverage	Palo Alto Networks Cortex Xpanse
Palo Alto Networks IoT Security - Tag Assets	Update VA Coverage	Palo Alto Networks IoT Security (Zingbox)
Qualys - Add IP Addresses to Asset Group	Update VA Coverage	Qualys Cloud Platform
Qualys - Add IP Addresses to User Subscription	Update VA Coverage	Qualys Cloud Platform
Qualys - Add Tags to Host Asset	Update VA Coverage	Qualys Cloud Platform
Qualys - Launch Vulnerability Scan	Update VA Coverage	Qualys Cloud Platform
Qualys - Remove IPs from Asset Group	Update VA Coverage	Qualys Cloud Platform
Qualys - Remove Tags from Host Asset	Update VA Coverage	Qualys Cloud Platform
Qualys - Update Asset Names to Host Names	Update VA Coverage	Qualys Cloud Platform
Rapid7 - Add IP Addresses to Site	Update VA Coverage	Rapid7 Nexpose and InsightVM
Rapid7 - Remove IP Addresses from Asset	Update VA Coverage	Rapid7 Nexpose and InsightVM
Rapid7 - Add or Remove Tag to/from Assets	Update VA Coverage	Rapid7 Nexpose and InsightVM
Rapid7 InsightVM - Add Assets to Scan	Update VA Coverage	Rapid7 InsightVM
Rapid7 - Remove Assets	Update VA Coverage	Rapid7 InsightVM
Snyk - Add Vulnerability Ignore	Update VA Coverage	Snyk
Tenable Vulnerability Management - Add Agent to Agent Group	Update VA Coverage	Tenable Vulnerability Management
Tenable Vulnerability Management - Add IP Addresses to Scan	Update VA Coverage	Tenable Vulnerability Management
Tenable Vulnerability Management - Add IP Addresses to Target Group	Update VA Coverage	Tenable Vulnerability Management
Tenable Vulnerability Management - Add or Remove Tags to/from Assets	Update VA Coverage	Tenable Vulnerability Management
Tenable Vulnerability Management - Create Assets	Update VA Coverage	Tenable Vulnerability Management
Tenable Vulnerability Management - Launch WAS Scan	Update VA Coverage	Tenable Vulnerability Management
Tenable Vulnerability Management - Unlink Tenable Agents	Update VA Coverage	Tenable Vulnerability Management
Tenable.io - Overwrite ACR	Update VA Coverage	Tenable Vulnerability Management
Tenable.sc (SecurityCenter) - Add IP Addresses to Assets	Update VA Coverage	Tenable.sc (SecurityCenter)
Wiz - Add Tags to Assets	Update VA Coverage	Wiz
Absolute - Run Script (Run Absolute Reach Scripts)	Deploy Files and Run Commands	Absolute
Axonius - Deploy Files and Run Shell Command on Linux Assets	Deploy Files and Run Commands	Axonius
Axonius - Run Linux SSH Scan	Deploy Files and Run Commands	Axonius
Axonius - Deploy Files and Run Shell Command on Windows Assets	Deploy Files and Run Commands	Axonius
Axonius - Run Windows WMI Scan	Deploy Files and Run Commands	Axonius
BigFix - Create Fixlet Action	Deploy Files and Run Commands	BigFix
Chef - Run Command	Deploy Files and Run Commands	Chef
ConnectWise Automate - Deploy Patches		ConnectWise Automate
Ivanti Security Controls - Patch Group	Deploy Files and Run Commands	Ivanti Security Controls
JumpCloud - Run Command	Deploy Files and Run Commands	JumpCloud
PANW Cortex XDR - Run Script	Deploy Files and Run Commands	Palo Alto Networks Cortex XDR
PDQ Connect - Deploy Package	Deploy Files and Run Commands	PDQ Connect
Qualys - Execute Script	Deploy Files and Run Commands	Qualys Cloud Platform
Quest KACE - Run Script	Deploy Files and Run Commands	Quest KACE Endpoint Systems Management Appliances
Red Hat Ansible Tower - Run Command	Deploy Files and Run Commands	Red Hat Ansible Tower
Automox - Change Policy	Execute Endpoint Security Agent Action	Automox
Automox- Install Update	Execute Endpoint Security Agent Action	Automox
Automox - Run Worklet per Asset	Execute Endpoint Security Agent Action	Automox
Cisco AMP - Isolate Assets	Execute Endpoint Security Agent Action	Cisco AMP (Various Vendors)
Cisco AMP - Unisolate Assets	Execute Endpoint Security Agent Action	Cisco AMP (Various Vendors)
Cisco AMP - Assign Assets to Group	Execute Endpoint Security Agent Action	Cisco AMP (Various Vendors)
Cisco Identity Services Engine (ISE) - Apply Policy to Devices	Execute Endpoint Security Agent Action	Cisco Identity Services Engine (ISE)
CrowdStrike Falcon - Add or Remove Assets to/from Host Group	Execute Endpoint Security Agent Action	CrowdStrike Falcon
CrowdStrike Falcon - Isolate/Unisolate Assets	Execute Endpoint Security Agent Action	CrowdStrike Falcon
Crowdstrike Falcon - Add or Remove Tagging Group to/from Assets	Execute Endpoint Security Agent Action	CrowdStrike Falcon
CrowdStrike Falcon - Run Script	Execute Endpoint Security Agent Action	CrowdStrike Falcon
CrowdStrike Falcon - RTR Run Command	Execute Endpoint Security Agent Action	CrowdStrike Falcon
Cybereason Deep Detect & Respond - Add Tag to Assets	Execute Endpoint Security Agent Action	Cybereason (Various Vendors)
Cybereason Deep Detect & Respond - Isolate/Unisolate Assets	Execute Endpoint Security Agent Action	Cybereason (Various Vendors)
Cylance - Delete Devices	Execute Endpoint Security Agent Action	CylancePROTECT
Datadog - Add Tag to Assets	Execute Endpoint Security Agent Action	Datadog
Forescout CounterACT - Assign Assets to Group Policy	Execute Endpoint Security Agent Action	Forescout CounterACT
Tag Halcyon Device	Execute Endpoint Security Agent Action	Halcyon
Untag Halcyon Device	Execute Endpoint Security Agent Action	Halcyon
Halcyon - Delete Device	Execute Endpoint Security Agent Action	Halcyon
Halcyon - Set Device Mode	Execute Endpoint Security Agent Action	Halcyon
LimaCharlie - Isolate/Unisolate Assets	Execute Endpoint Security Agent Action	LimaCharlie (Various Vendors)
LimaCharlie - Tag Sensors	Execute Endpoint Security Agent Action	LimaCharlie
ManageEngine Endpoint (Desktop) Central and Patch Manager Plus - Perform Action	Execute Endpoint Security Agent Action	ManageEngine Endpoint (Desktop) Central and Patch Manager Plus
McAfee ePolicy Orchestrator (ePO) - Add or Remove Tag to/from Assets	Execute Endpoint Security Agent Action	Trellix ePolicy Orchestrator (ePO)
Microsoft Defender ATP - Add or Remove Tag to/from Assets	Execute Endpoint Security Agent Action	Microsoft Defender ATP
Microsoft Defender ATP - Isolate/Unisolate Assets	Execute Endpoint Security Agent Action	Microsoft Defender ATP
NinjaOne - Run Scripts on Device	Execute Endpoint Security Agent Action	Ninja One (RMM)
Offboard Assets - Microsoft Defender ATP	Execute Endpoint Security Agent Action	Microsoft Defender ATP
PANW (Palo Alto Networks) Cortex XDR - Isolate/Unisolate Assets	Execute Endpoint Security Agent Action	Palo Alto Networks Cortex XDR
PANW Cortex XDR - Add or Remove Tag to/from Assets	Execute Endpoint Security Agent Action	Palo Alto Networks Cortex XDR
Secureworks Taegis XDR - Add/Remove Tag	Execute Endpoint Security Agent Action	Secureworks Taegis XDR (Red Cloak TDR)
SentinelOne - Add or Remove Tag to/from Assets	Execute Endpoint Security Agent Action	SentinelOne
SentinelOne - Isolate/Unisolate Assets	Execute Endpoint Security Agent Action	SentinelOne
SentinelOne - Execute Remote Script	Execute Endpoint Security Agent Action	SentinelOne
SentinelOne - Initiate Scan	Execute Endpoint Security Agent Action	SentinelOne
SentinelOne - Remove Asset	Execute Endpoint Security Agent Action	SentinelOne
SentinelOne - Change Asset Site	Execute Endpoint Security Agent Action	SentinelOne
SentinelOne - Change Asset Group	Execute Endpoint Security Agent Action	SentinelOne
SentinelOne - Enable Or Disable Agent	Execute Endpoint Security Agent Action	SentinelOne
Tanium - Add or Remove Tag to/from Assets	Execute Endpoint Security Agent Action	Tanium Interact
Tenable.sc (SecurityCenter) - Launch Scan	Execute Endpoint Security Agent Action	Tenable.sc (SecurityCenter)
Trend Micro Apex One (OfficeScan) - Isolate, Restore, Relocate, or Uninstall Security Agent	Execute Endpoint Security Agent Action	Trend Micro Apex One (OfficeScan)
Change Policy - VMware Carbon Black App Control	Execute Endpoint Security Agent Action	VMware Carbon Black App Control
VMware CB Cloud - Change Policy by Name	Execute Endpoint Security Agent Action	VMWare CB Cloud
VMware CB Cloud - Change Policy by Policy ID	Execute Endpoint Security Agent Action	VMWare CB Cloud
VMware CB Cloud - Delete Assets	Execute Endpoint Security Agent Action	VMWare CB Cloud
VMware CB Cloud - Quarantine/Unquarantine Assets	Execute Endpoint Security Agent Action	VMWare CB Cloud
VMware CB EDR - Isolate and Unisolate Assets	Execute Endpoint Security Agent Action	VMWare CB EDR
1Password - Suspend User	Manage Users and User Groups	1Password
Suspend Generic SCIM User	Manage Users and User Groups	Generic SCIM
Delete Generic SCIM Group	Manage Users and User Groups	Generic SCIM
Add Generic SCIM Entity to Group	Manage Users and User Groups	Generic SCIM
Active Directory - Create Users	Manage Users and User Groups	Active Directory
Active Directory - Update Users	Manage Users and User Groups	Active Directory
Airtable - Create User	Manage Users and User Groups	Airtable Enterprise
Airtable - Suspend User	Manage Users and User Groups	Airtable Enterprise
Airtable - Add or Remove User from Group	Manage Users and User Groups	Airtable Enterprise
Aurion - Create User	Manage Users and User Groups	Aurion
Aurion - Update User	Manage Users and User Groups	Aurion
Aurion - Suspend User	Manage Users and User Groups	Aurion
Axonius - Suspend All Entities in User	Manage Users and User Groups	Axonius
BambooHR - Suspend Employee	Manage Users and User Groups	BambooHR
BitSight - Create User	Manage Users and User Groups	BitSight
BitSight - Assign Role to User	Manage Users and User Groups	BitSight
BitSight - Assign Group to User	Manage Users and User Groups	BitSight
Delete Bandura Threater User	Manage Users and User Groups	threatER
Cloudflare Zero Trust - Revoke User Session	Manage Users and User Groups	CloudFlare Zero Trust
Cloudflare Zero Trust - Remove Member	Manage Users and User Groups	CloudFlare Zero Trust
CyberArk Alero - Create User Invitation	Manage Users and User Groups	CyberArk Alero
CyberArk Alero - Delete User	Manage Users and User Groups	CyberArk Alero
CyberArk Alero - Update User Role	Manage Users and User Groups	CyberArk Alero
CyberArk Alero - Update User Status	Manage Users and User Groups	CyberArk Alero
Deactivate Code42 Agent	Manage Users and User Groups	Code42 Incyder
Datadog - Create User	Manage Users and User Groups	Datadog
Datadog - Update User	Manage Users and User Groups	Datadog
Datadog - Suspend User	Manage Users and User Groups	Datadog
Duo - Create User	Manage Users and User Groups	Duo Beyond
Duo - Update User	Manage Users and User Groups	Duo Beyond
Duo - Delete User	Manage Users and User Groups	Duo Beyond
Equinix - Create Users	Manage Users and User Groups	Equinix
Equinix - Disable Users	Manage Users and User Groups	Equinix
Equinix - Remove Users	Manage Users and User Groups	Equinix
Freshservice - Add or Remove User from Group	Manage Users and User Groups	Freshservice
Google Workspace - Activate User	Manage Users and User Groups	Google Workspace
Google Workspace - Suspend User	Manage Users and User Groups	Google Workspace
Google Workspace - Update User	Manage Users and User Groups	Google Workspace
Google Workspace - Create Role	Manage Users and User Groups	Google Workspace
Google Workspace - Update Role	Manage Users and User Groups	Google Workspace
Google Workspace - Delete Role	Manage Users and User Groups	Google Workspace
Google Workspace - Create Group	Manage Users and User Groups	Google Workspace
Google Workspace - Update Group	Manage Users and User Groups	Google Workspace
Google Workspace - Delete Group	Manage Users and User Groups	Google Workspace
Google Workspace - Reset User Password	Manage Users and User Groups	Google Workspace
Ivanti Security Controls - Add Machine to Machine Group	Manage Users and User Groups	Ivanti Security Controls
Jira Software - Create User	Manage Users and User Groups	Atlassian (formerly Atlassian Jira Software)
Jira Software - Delete User	Manage Users and User Groups	Atlassian (formerly Atlassian Jira Software)
Kandji - Delete User	Manage Users and User Groups	Kandji
Keeper - Delete User	Manage Users and User Groups	Keeper
LastPass - Disable Users	Manage Users and User Groups	LastPass
Maria DB - Create User	Manage Users and User Groups	MariaDB
Maria DB - Delete User	Manage Users and User Groups	MariaDB
Microsoft AD - Add/Remove Delegate Control Tasks to/from Assets	Manage Users and User Groups	Microsoft Active Directory (AD)
Microsoft Active Directory (AD) - Change Asset OU	Manage Users and User Groups	Microsoft Active Directory (AD)
Microsoft Active Directory (AD) - Add Assets to Group	Manage Users and User Groups	Microsoft Active Directory (AD)
Microsoft Entra ID (formerly Azure AD) - Delegate User's Mailbox	Manage Users and User Groups	Microsoft Entra ID
Microsoft Active Directory (AD) - Remove Assets from Group	Manage Users and User Groups	Microsoft Active Directory (AD)
Microsoft Active Directory (AD) - Remove Assets from AD	Manage Users and User Groups	Microsoft Active Directory (AD)
Microsoft Active Directory (AD) - Add or Update LDAP Attributes of Assets	Manage Users and User Groups	Microsoft Active Directory (AD)
Microsoft Active Directory (AD) - Enable or Disable Assets	Manage Users and User Groups	Microsoft Active Directory (AD)
Microsoft Active Directory (AD) - Reset Users' Passwords	Manage Users and User Groups	Microsoft Active Directory (AD)
Microsoft Entra ID (formerly Azure AD) - Activate User	Manage Microsoft Azure Services	Microsoft Entra ID
Microsoft Entra ID (formerly Azure AD) - Reset User Password	Manage Users and User Groups	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Create Role	Manage Users and User Groups	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Delete Role	Manage Users and User Groups	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Update Role	Manage Users and User Groups	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Forward Email Rule	Manage Users and User Groups	Microsoft Entra ID
Microsoft Entra ID (formerly Azure AD) - Suspend User	Manage Users and User Groups	Microsoft Entra ID
Microsoft Entra ID (formerly Azure AD) - Add or Remove License to/from User	Manage Users and User Groups	Microsoft Entra ID
Microsoft Entra ID (formerly Azure AD) - Add or Remove License to/from Groups	Manage Users and User Groups	Microsoft Entra ID
Microsoft Entra ID (formerly Azure AD) - Update User	Manage Users and User Groups	Microsoft Entra ID
Microsoft Entra ID (formerly Azure AD) - Update Mailbox Auto Reply Settings	Manage Users and User Groups	Microsoft Entra ID
Add MimecastV2 Group Members	Manage Users and User Groups	Mimecast - V2
Monday - Manage Users	Manage Users and User Groups	Monday
NAVEX - Create User	Manage Users and User Groups	NAVEX
NAVEX - Delete User	Manage Users and User Groups	NAVEX
NAVEX - Assign User Group	Manage Users and User Groups	NAVEX
NAVEX - Update User Details	Manage Users and User Groups	NAVEX
Okta - Add or Remove Users to/from Group	Manage Users and User Groups	Okta
Okta - Remove Users from Groups	Manage Users and User Groups	Okta
Okta - Create User	Manage Users and User Groups	Okta
Okta - Update User	Manage Users and User Groups	Okta
Okta - Enable Users	Manage Users and User Groups	Okta
Okta - Disable Users	Manage Users and User Groups	Okta
Okta - Remove User Extension	Manage Users and User Groups	Okta
Okta - Create Group	Manage Users and User Groups	Okta
Okta - Update Group	Manage Users and User Groups	Okta
Okta - Delete Group	Manage Users and User Groups	Okta
Okta - Create Role	Manage Users and User Groups	Okta
Okta - Update Role	Manage Users and User Groups	Okta
Okta - Delete Role	Manage Users and User Groups	Okta
Okta - Activate User	Manage Users and User Groups	Okta
Okta - Reset User Factors	Manage Users and User Groups	Okta
Okta - Revoke User Sessions	Manage Users and User Groups	Okta
Okta - Read User (Refetch)	Manage Users and User Groups	Okta
Okta EC - Read Group (Refetch)	Manage Users and User Groups	Okta
Okta - Reset User Password	Manage Users and User Groups	Okta
Logout User - Onelogin	Manage Users and User Groups	OneLogin
Modify User Status - OneLogin	Manage Users and User Groups	OneLogin
Modify User State - OneLogin	Manage Users and User Groups	OneLogin
Modify User Custom Fields - OneLogin	Manage Users and User Groups	OneLogin
Add Pipedrive User	Manage Users and User Groups	Pipedrive
Suspend Pipedrive User	Manage Users and User Groups	Pipedrive
Qualys - Create User	Manage Users and User Groups	Qualys Cloud Platform
Qualys - Update User	Manage Users and User Groups	Qualys Cloud Platform
Qualys - Suspend User	Manage Users and User Groups	Qualys Cloud Platform
Qualys - Activate User	Manage Users and User Groups	Qualys Cloud Platform
Qualys - User Password Change	Manage Users and User Groups	Qualys Cloud Platform
Qualys - Assign Role to User	Manage Users and User Groups	Qualys Cloud Platform
Qualys - Add Tags to User	Manage Users and User Groups	Qualys Cloud Platform
Set a New Password for User - Onelogin	Manage Users and User Groups	OneLogin
Append to Comment - OneLogin	Manage Users and User Groups	OneLogin
Sailpoint - Disable Users	Manage Users and User Groups	Sailpoint Identity Manager
Sailpoint Identity Manager - Add/Remove User From Group	Manage Users and User Groups	Sailpoint Identity Manager
Salesforce - Activate User	Manage Users and User Groups	Salesforce
Salesforce - Create User	Manage Users and User Groups	Salesforce
Salesforce - Suspend User	Manage Users and User Groups	Salesforce
Salesforce - Update User	Manage Users and User Groups	Salesforce
Salesforce - Reset User Password	Manage Users and User Groups	Salesforce
Salesforce - Create Role or Profile	Manage Users and User Groups	Salesforce
Salesforce - Assign Role or Profile to User	Manage Users and User Groups	Salesforce
Salesforce - Update Role or Profile	Manage Users and User Groups	Salesforce
Salesforce - Delete Role or Profile	Manage Users and User Groups	Salesforce
SAP Ariba SCIM - Create User	Manage Users and User Groups	SAP Ariba SCIM
SAP Ariba SCIM - Suspend User	Manage Users and User Groups	SAP Ariba SCIM
SAP Ariba SCIM - Delete User	Manage Users and User Groups	SAP Ariba SCIM
SAP Ariba SCIM - Create Group	Manage Users and User Groups	SAP Ariba SCIM
SAP Ariba SCIM - Assign User to Group	Manage Users and User Groups	SAP Ariba SCIM
SAP Ariba SCIM - Delete Group	Manage Users and User Groups	SAP Ariba SCIM
SAP Concur - Create User	Manage Users and User Groups	SAP Concur 3.x
SAP Concur - Delete User	Manage Users and User Groups	SAP Concur 3.x
SAP Concur - Modify User	Manage Users and User Groups	SAP Concur 3.x
ServiceNow - Create User	Manage Users and User Groups	ServiceNow
ServiceNow - Update User	Manage Users and User Groups	ServiceNow
ServiceNow - Activate User	Manage Users and User Groups	ServiceNow
ServiceNow - Suspend User	Manage Users and User Groups	ServiceNow
ServiceNow - Create Group	Manage Users and User Groups	ServiceNow
ServiceNow - Update Group	Manage Users and User Groups	ServiceNow
ServiceNow - Delete Group	Manage Users and User Groups	ServiceNow
ServiceNow - Create Role	Manage Users and User Groups	ServiceNow
ServiceNow - Update Rol e	Manage Users and User Groups	ServiceNow
ServiceNow - Delete Role	Manage Users and User Groups	ServiceNow
ServiceNow - Assign Group to Group	Manage Users and User Groups	ServiceNow
ServiceNow - Assign Group to Use r	Manage Users and User Groups	ServiceNow
ServiceNow - Assign Role to Group	Manage Users and User Groups	ServiceNow
ServiceNow - Assign Role to User	Manage Users and User Groups	ServiceNow
ServiceNow - Assign Permission to Role	Manage Users and User Groups	ServiceNow
ServiceNow - Reset User Password	Manage Users and User Groups	ServiceNow
Slack - Clear User’s session settings	Manage Users and User Groups	Slack
Slack - Create Group	Manage Users and User Groups	Slack
Slack - Create User	Manage Users and User Groups	Slack
Slack - Delete Group	Manage Users and User Groups	Slack
Slack - Update Group	Manage Users and User Groups	Slack
Slack - Update User	Manage Users and User Groups	Slack
Slack - Suspend User	Manage Users and User Groups	Slack
Tenable Vulnerability Management - Assign Group to User	Manage Users and User Groups	Tenable Vulnerability Management
Tenable Vulnerability Management - Assign Role to User	Manage Users and User Groups	Tenable Vulnerability Management
Tenable Vulnerability Management - Create User	Manage Users and User Groups	Tenable Vulnerability Management
Tenable Vulnerability Management - Delete Account	Manage Users and User Groups	Tenable Vulnerability Management
Tenable Vulnerability Management - Delete Asset	Manage Users and User Groups	Tenable Vulnerability Management
Tenable Vulnerability Management - Suspend User	Manage Users and User Groups	Tenable Vulnerability Management
Tenable Vulnerability Management - Update Account Status	Manage Users and User Groups	Tenable Vulnerability Management
Thycotic - Enable User	Manage Users and User Groups	Delinea Secret Server
Thycotic - Suspend User	Manage Users and User Groups	Delinea Secret Server
VMware CB Cloud - Create User	Manage Users and User Groups	VMware Carbon Black Cloud (Carbon Black CB Defense)
VMware CB Cloud - Delete User	Manage Users and User Groups	VMware Carbon Black Cloud (Carbon Black CB Defense)
VMware CB Cloud - Assign Role to User	Manage Users and User Groups	VMware Carbon Black Cloud (Carbon Black CB Defense)
Workday - Activate User	Manage Users and User Groups	Workday
Workday - Suspend User	Manage Users and User Groups	Workday
Zendesk - Assign Group to Users	Manage Users and User Groups	Zendesk
Zendesk - Create User	Manage Users and User Groups	Zendesk
Zendesk - Delete User	Manage Users and User Groups	Zendesk
Zoom - Delete User	Manage Users and User Groups	Zoom
Zoom - Create User	Manage Users and User Groups	Zoom
Zoom - Update User Group	Manage Users and User Groups	Zoom
Zscaler - Delete Users	Manage Users and User Groups	Zscaler Web Security
AWS - Start/Stop EC2 Instances	Manage AWS Services	AWS
AWS - Add Tags to Resource	Manage AWS Services	AWS
AWS - Remove Tags from Resource	Manage AWS Services	AWS
AWS - Install Software Using SSM	Manage AWS Services	AWS
AWS - Patch Software Using SSM	Manage AWS Services	AWS
AWS - Delete or Suspend IAM Users	Manage AWS Services	AWS
Microsoft Azure - Add Tag to Cloud Instance	Manage Microsoft Azure Services	Microsoft Azure
Microsoft Entra ID (Azure AD) - Add or Remove Assets in Group	Manage Microsoft Azure Services	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Add or Remove Members from Administrative Unit	Manage Microsoft Azure Services	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Create Users	Manage Microsoft Azure Services	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Delete Assets	Manage Microsoft Azure Services	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Enable or Disable Assets	Manage Microsoft Azure Services	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Revoke Users Session	Manage Microsoft Azure Services	Microsoft Entra ID
Microsoft Entra ID (Azure AD) - Role Assignment Actions	Manage Microsoft Azure Services	Microsoft Entra ID
Microsoft Entra ID (formerly Azure AD) - Update Entra ID Device	Manage Microsoft Azure Services	Microsoft Entra ID
DNS Made Easy - Remove Subdomain	Manage DNS Services	DNS Made Easy
Zscaler - Block URLs	Manage DNS Services	Zscaler Web Security
Zscaler - Add or Remove URL to/from Category	Manage DNS Services	Zscaler Web Security
GCP - Add or Remove Tags to/from Assets	Manage Google Services	Google Cloud Platform (GCP)
GCP - Add or Remove Labels to/from Assets	Manage Google Services	Google Cloud Platform (GCP)
GCP - Send Object To Bucket	Manage Google Services	Google Cloud Platform (GCP)
Google BigQuery - Send to Table	Manage Google Services	Google
Google Workspace - Add Users	Manage Google Services	Google Workspace
Google Workspace - Add Users to Group	Manage Google Services	Google Workspace
Google Workspace - Change Users OU	Manage Google Services	Google Workspace
Google Workspace - Change Browser OU	Manage Google Services	Google Workspace
Google Workspace - Delete Extension	Manage Google Services	Google Workspace
Google Workspace - Delete / Wipe Identity Cloud Device	Manage Google Services	Google Workspace
Google Workspace - Remove Users	Manage Google Services	Google Workspace
Google Workspace - Remove Users From Group	Manage Google Services	Google Workspace
Google Workspace - Reset Users Logon Cookies	Manage Google Services	Google Workspace
Google Workspace - Role Assignments Actions	Manage Google Services	Google Workspace
Google Workspace - Send Direct Message to a Space	Manage Google Services	Google Workspace
Oracle Cloud - Start or Stop Compute Instances	Manage Google Services	Oracle Cloud
BeyondTrust BeyondInsight - Send Block Policy to SCP	Manage Software	NA
BeyondTrust BeyondInsight - Send Block Policy to S3	Manage Software	Amazon Web Services (AWS)
Flexera - Create Retirement Campaign	Manage Software	Flexera IT Asset Management
Freshservice - Update Application	Manage Software	Freshservice
Github - Remove User Extensions	Manage Software	Github
ManageEngine Endpoint (Desktop) Central and Patch Manager Plus - Create Patch Action	Manage Software	ManageEngine Endpoint (Desktop) Central and Patch Manager Plus
ManageEngine Endpoint (Desktop) Central and Patch Manager Plus - Create Software Action	Manage Software	ManageEngine Endpoint (Desktop) Central and Patch Manager Plus
Salesforce - Delete Extensions	Manage Software	Salesforce
Tanium - Create Action	Manage Software	Tanium Asset
Tanium - Create Software Deployment	Manage Software	Tanium Client Status
Elastic Fleet - Update Tags	Manage Devices	Elastic Fleet
Jamf Pro - Lock Device	Manage Devices	Jamf Pro
Jamf Pro - Update Device	Manage Devices	Jamf Pro
Assign Active Directory Group to Users	Access Management	Okta
Duo - Assign Group to Users	Access Management	Duo Beyond
Microsoft Entra ID (formerly Azure AD) - Assign Group to Users	Access Management	Microsoft Entra ID (Azure AD) and Microsoft Intune
Microsoft Entra ID (formerly Azure AD) - Assign Group to Groups	Access Management	Microsoft Entra ID (Azure AD) and Microsoft Intune
Microsoft Entra ID (formerly Azure AD) - Assign Permission to Roles	Access Management	Microsoft Entra ID (Azure AD) and Microsoft Intune
Microsoft Entra ID (formerly Azure AD) - Assign Role to Groups	Access Management	Microsoft Entra ID (Azure AD) and Microsoft Intune
Microsoft Entra ID (formerly Azure AD) - Assign Role to Users	Access Management	Microsoft Entra ID (Azure AD) and Microsoft Intune
Okta - Assign Users to Applications	Access Management	Okta
Okta - Assign Group to Users	Access Management	Okta
Okta - Assign Permission to Roles	Access Management	Okta
Okta - Assign Role to Groups	Access Management	Okta
Okta - Assign Role to Users	Access Management	Okta
SailPoint IdentityNow - Create Certification Campaig n	Access Management	SailPoint IdentityNow
SharePoint - Delete Users Sites Permissions	Access Management	SharePoint
Slack - Assign Group to Users	Access Management	Slack
Slack - Assign Role to Users	Access Management	Slack
Slack - Assign Resource to Users	Access Management	Slack
Slack - Assign Workspace to Channels	Access Management	Slack
Slack - Set Permissions to Users in Channel	Access Management	Slack

Updated about 17 hours ago