Security | Save Investigation Finding

Creates and associates security findings with a Security Agent investigation to track detected threats.

Required Editions

Available in: Lightning Experience

Available in: Enterprise, Performance, Unlimited, and Developer Editions with the Security Center add-on and Foundations or Agentforce 1 Editions.

User Permissions Needed
To view Security Center pages:	View Security Center
To create and edit security policies:	Manage Security Center
See Common User Access for Standard Agent Actions.

Action Details

API Name	SaveInvestigationFinding
Reference Action Type	Standard Action
Does this tool run one or more prompt templates?	No
Required setup	Turn on Security Center and Security Agent with View Security Center or Manage Security Center user permission.

Guidelines and Considerations

SaveInvestigationFinding creates new finding records and links them to a parent investigation.

Retrieves findings from various threat detection sources, such as API anomalies, credential stuffing, and session hijacking.
Associates multiple findings with a single investigation.