QuestionQ15Verified/Falcon Fusion for Identity ProtectionCopy linkReport a problemAsk AstroTutorSave questionWhich trigger causes a Falcon Fusion Workflow to run from Falcon Identity Protection?ANew endpoint detectionBSpotlight user action > HostCAlert > Identity detectionDNew incidentShow AnswerAnswerExplanationFalcon Identity Protection detection events are exposed to Falcon Fusion through the Alert trigger category using the Identity detection subtype.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion