Security Operations Integration - Get Network Statistics capability

The Get Network Statistics capability retrieves a list of active network connections from a host or endpoint. It can be used for incident enrichment during investigations. This capability is triggered automatically when a configuration item is added to a security incident.

The Get Network Statistics capability has a workflow, Security Operations Integrations - Get Network Statistics workflow that accepts one or more CIs and tasks. The workflow iterates over each implementation and each CI and reinvokes the implementation workflow.

Note: If no implementations are available, capability actions are not displayed in product menus.