Use the Put File on Endpoint SOAR action to put the last file that is attached to the Security Incident on the endpoint (asset).

  • This action can be run from an alert and from a device. It can be run on only one alert or device at a time.
  • This action can be performed from the Affected CI or Alerts from the Security Incidents related list.
  • The action will put the selected file on the inserted path.
  • After successful execution of the action or in case of any failure or exception, a work note is captured.
  • You can put all types of scripting files on the destination endpoint.