An incident command activity enables you to launch a specific command with or without arguments. The following fields from the incident associated with the workflow process can be used as input to the command:
DIP (Target IP)
DIP : Port
RT1 (DeviceAttackName)
SIP (Initiator IP)
SIP : Port
Text (incident information in name value pair format)
NOTE:The command must be stored in the <install_directory>\config\exec directory on the iTRAC workflow server, usually the same machine where the Data Access Server (DAS) is installed.
For trademark and copyright information, see Legal Notices.