Use the Put File on Endpoint SOAR action to put the last file that is attached to the Security Incident on the endpoint (asset).
- This action can be run from an alert and from a device. It can be run on only one alert or device at a time.
- This action can be performed from the Affected CI or Alerts from the Security Incidents related list.
- The action will put the selected file on the inserted path.
- After successful execution of the action or in case of any failure or exception, a work note is captured.
- You can put all types of scripting files on the destination endpoint.