Action Library

As part of an Enforcement Set configuration, you need to define the main enforcement action. You can also add additional actions to be performed after execution of the main action.

Axonius offers a vast list of actions, categorized under the following categories below:

• Notify - send emails or notifications to various systems, such as Syslog, Slack and others.
• Create Incident or Ticket - create an incident in various systems, such as ServiceNow, Jira and others.
• Axonius Utilities - perform Axonius actions on devices or users.
• Enrich Asset Data - enrich asset data using different sources.
• Manage CMDB Asset - create or update CMDB assets (ServiceNow, Cherwell, etc.)
• Update VA Coverage - update scanned scope in various VA tools.
• Deploy Files and Run Commands - run a windows shell command, WMI, or Linux SSH scan.
• Execute Endpoint Security Agent Action - isolate or unisolate devices in various EDR solutions.
• Manage Users and User Groups - enable or disable users or user groups.
• Manage AWS Services - actions on Amazon EC2 instances, such as start/stop or tag.
• Manage Microsoft Azure Services - actions on Microsoft Azure cloud instances.
• Manage DNS Services - actions on DNS related services.

To configure an action, click a category to view its actions, and then click the desired action. The Action Library page is then replaced by the selected action configuration page.
Use the navigation tree and the search bar to explore the various enforcement actions.