Security | Save Investigation Impacted Instance

Tracks instances impacted by a security threat by associating them with a Security Agent investigation.

Required Editions

Available in: Lightning Experience
Available in: Enterprise, Performance, Unlimited, and Developer Editions with the Security Center add-on and Foundations or Agentforce 1 Editions.
User Permissions Needed
To view Security Center pages: View Security Center
To create and edit security policies: Manage Security Center
See Common User Access for Standard Agent Actions.

Action Details

API Name SaveInvestigationImpactedInstance
Reference Action Type Standard Action
Does this tool run one or more prompt templates? No
Required setup Turn on Security Center and Security Agent with View Security Center or Manage Security Center user permission.

Guidelines and Considerations

SaveInvestigationImpactedInstance establishes the scope and impact of security threats.

  • Documents which instances were affected by a security incident.
  • Links impacted instances to the parent investigation for comprehensive tracking.
  • Tracks multiple instances per investigation.