{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":4350,"path":"build-workflows/workflow-studio/secops-spoke.md","title":"Security Operations spoke","bundle":null,"doc_type":null,"release":"australia","body":"\n# Security Operations spoke\n\nProvides Security Operations actions for flow designers to manage Security Incident Response flow templates.\n\n## Security Incident Response flow templates\n\nThe Security Incident Response flow templates are created using [Workflow Studio](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/build-workflows/workflow-studio/workflow-studio.md).\n\n**Note:** Each of the flows is triggered when the **Category** in a security incident is set or changed.\n\n|Template|Description|\n|--------|-----------|\n|Security Incident Confidential Data Exposure flow template|Perform a series of tasks designed to handle the exposure of sensitive data.|\n|Security Incident Denial of Service flow template|Perform a series of tasks designed to handle Denial of Service \\(DOS\\) attacks.|\n|Security Incident Lost Equipment flow template|Perform a series of tasks designed to handle lost equipment.|\n|Security Incident Malicious Software flow template|Perform a series of tasks designed to handle malicious software on your network.|\n|Security Incident Phishing flow template|Perform a series of tasks designed to handle spear phishing emails on your network.|\n|Security Incident Policy Violation flow template|Perform a series of tasks designed to handle security policy violations.|\n|Security Incident Reconnaissance flow template|Perform a series of tasks designed to handle reconnaissance on your network.|\n|Security Incident Rogue Server or Service flow template|Perform a series of tasks designed to handle activity from rogue servers or services affecting your network.|\n|Security Incident Spam flow template|Perform a series of tasks designed to handle email spam on your network.|\n|Security Incident Unauthorized Access flow template|Perform a series of tasks designed to handle unauthorized access to your network.|\n|Security Incident Web/BBS Defacement flow template|Perform a series of tasks designed to handle vandalism directed against one of your BBS or web sites.|\n\n**Parent Topic:**[Spokes](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/build-workflows/workflow-studio/spokes.md)\n\n"}}