Skip to main content

Tag Threat Actions

The following action targets Threat Manager.

Tag Object​

This action adds tags to objects associated with a threat.

tagobject

  • Tags – Select the tags to be applied to the object.
  • Action – Specify whether to add or remove tags. If not specified, the tag will be added.
  • Objects – Select which objects to tag. If not specified, the user who triggered the threat will be used.

Manage Blocking Policy​

This action adds or removes a user from a blocking policy.

manageblockingpolicy

  • Users – The users to have their RDP Session ended. If not specified, the user who triggered the threat will be used. Select the users from the drop-down list.
  • Credential – The domain credential used to run the action. Domain credentials are populated by credential profiles that are created on the Integrations page. If not specified, the action will be run under the credentials of the action. Select the credentials from the drop-down list.
  • Policy Name - The name of the Threat Prevention blocking policy.
  • Operation - Whether to add or remove the user from the blocking policy.