Elastic Security × AmbactiBring Elastic Security into
the flow of work.
A little less busywork with Elastic Security.
Gather contextDo the workReview & share
Case6 capabilities+
- Get many casesRead
Retrieve many cases
- Get the status of a caseRead
Retrieve a summary of all case activity
- Get a caseRead
- Create a caseWrite
- Delete a caseWrite
- Update a caseWrite
Case Comment5 capabilities+
- Get many case commentsRead
Retrieve many case comments
- Get a case commentRead
- Add a comment to a caseWrite
- Remove a comment from a caseWrite
- Update a comment from a caseWrite
Update a comment in a case
Case Tag2 capabilities+
- Add a tag to a caseWrite
- Remove a tag from a caseWrite
Connector1 capabilities+
- Create a connectorWrite
Frequently asked
questions.
What could an Ambacti integration do with Elastic Security?
The documented operations include Case: Get many cases; Case: Get the status of a case; Case: Get a case; Case Comment: Get many case comments.
Could I keep a workflow read-only?
For a read-only workflow, limit account permissions to reading data and exclude actions that create, update, or delete records.
Will every action run automatically?
Choose which steps could run on their own and which should pause for review. Changes should follow the permissions and approval rules you set.
Do I need to review actions in Elastic Security?
Decide which work could run on its own and which steps need your review.