Automating Response in Fusion
Fusion allows you to create a set of automated responses to events. A response can be a notification sent to a third-party system or a blocking action provided by a third-party system.
To automate a response involves two configuration steps:
Configure a Response Integration. Response integrations define the method and system a response event is sent to when a Response Policy determines a response action should be triggered.
You must add one or more response integrations to Fusion before a response policy will trigger an action.
Configure a Response Policy. Response policies define automated actions in response to events generated by Detection Models. By creating and configuring response policies, teams can streamline their incident response processes, ensuring timely and appropriate actions are taken when specific conditions are met.
A response policy has one or more response integrations associated with it.
Updated about 1 month ago