Security Operations Integrations - Get Network Statistics workflow The Security Operations Integrations - Get Network Statistics workflow retrieves a list of active network connections from a host or endpoint. Before you beginRole required: sn_si.analyst About this task This workflow runs automatically when a configuration item is added to a security incident. Workflow process activities include: Capability - Determine CIs activity Execution Tracking - Begin (CIs) activity Get Supported Security Capabilities activity Capability Execution Tracking - No Impls activity Parallel Flow Launcher - returns search results in an array. Capability Execution Tracking - Complete activity Capability - Determine CIs activityThe Capability - Determine CIs workflow activity determines which configuration items (CIs) to include in the workflow. Execution Tracking - Begin (CIs) activityThe Execution Tracking - Begin (CIs) workflow activity starts the auditing process for a Security Operations Integration workflow that operates on configuration items (CIs).Get Supported Security Capabilities activityThe Get Supported Capabilities workflow activity retrieves the name and number of integrations that are active and support the requested capability. Capability Execution Tracking - No Impls activityThe Capability Execution Tracking - No Impls workflow activity creates an error record when no integration capability implementation is found. Security Incident Response - Get Network Statistics workflowThe Security Incident Response > Get Network Statistics workflow retrieves the network statistics for an affected Windows-based resource when added to a security incident in the Analysis state.