Hey team,
The workflows are pretty useful, but you still need to do a lot of extra steps to, for example, check the hash from the alert (without using Trigger Alert and On Alert). Is it planned to add an option to run the attached workflows to the rule through the "Take Actions" button in the Alert's body?
Is it planned to add an option to run an action per field (at least highlighted) in the security alert? As an example, to click on the field with the IP address and get the options list to check it against VT or other TIs or make any other actions? Appreciate it a lot.