Workflows are the core of Trellix Hyperautomation, allowing you to automate security response actions. Perform these steps to create a new workflow definition in the user interface.
Click
and from HYPERAUTOMATION, select Workflows.On the Workflows page, click Create Workflow.
In the Create Workflow page, enter a name for the workflow and provide its description.
Toggle the Sub-workflow switch as required.
Important
A sub-workflow is intended to be called by another workflow and cannot be mapped to the alert category.
Toggle the Scheduled switch to set a schedule for the workflow.
Important
A Scheduled workflow is managed purely in Hyperautomation console and cannot be mapped to alert categories.
Click Create.
Navigate to the Hyperautomation console using SSO. Define the workflow details and publish.
Note
Always refresh the NDR Console page after making any workflow modifications to ensure it reflects the latest data and configurations.