{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44216,"path":"security-management/secops-integration-cb-get-running-processes-workflow.md","title":"Security Operations Carbon Black Integration - Get Running Processes Flow","bundle":null,"doc_type":null,"release":"australia","body":"\n# Security Operations Carbon Black Integration - Get Running Processes Flow\n\nThe Security Operations Carbon Black Integration - Get Running Processes is the implementation for the Carbon Black integration launched by the Security Operations Integration - Get Running Process flow.\n\nRole required: sn\\_si.analyst\n\n\\[Omitted image \"carbon-black-get-running-proccess-1.png\"\\] Alt text: Flow Design for Security Operations Carbon Black Integration - Get Running Processes 1 \\[Omitted image \"carbon-black-get-running-proccess-2.png\"\\] Alt text: Flow Design for Security Operations Carbon Black Integration - Get Running Processes 2 \\[Omitted image \"carbon-black-get-running-proccess-3.png\"\\] Alt text: Flow Design for Security Operations Carbon Black Integration - Get Running Processes 3 \\[Omitted image \"carbon-black-get-running-proccess-4.png\"\\] Alt text: Flow Design for Security Operations Carbon Black Integration - Get Running Processes 4 \\[Omitted image \"carbon-black-get-running-proccess-5.png\"\\] Alt text: Flow Design for Security Operations Carbon Black Integration - Get Running Processes 5\n\nActions specific to this flow are described here. For more information on other actions, see [Common Security Operations integration flows and orchestration activities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/common-wf-activities.md).\n\n-   **[Collect Carbon Black Configurations Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/collect-cb-config-activity.md)**  \nThe Collect Carbon Black Configurations flow action gathers configuration information to use in the flow.\n-   **[Check MID Server Status](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/check-mid-server-status.md)**  \nDetermines whether the MID Server identified in the **MID Server Host** field of the integration's configuration is up and running. If the field is set to **Any**, the flow action verifies that any MID Server is up and running.\n-   **[Get Sensor ID Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/get-sensor-id-activity.md)**  \nThe Get Sensor ID flow action gathers sensor identifiers to use in the flow.\n-   **[Create Session Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/create-session-activity.md)**  \nThe Create Session flow action establishes a Carbon Black session to use in the flow.\n-   **[Check Session Status Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/check-session-status-activity.md)**  \nDetermines the status of a Carbon Black session within the flow.\n-   **[Create Command Process Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/create-command-process-activity.md)**  \nThe Create Command Process flow action create a Carbon Black command process to use in the flow .\n-   **[Check Command Status and Get Process Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/check-command-status-get-process-activity.md)**  \nChecks the Carbon Black command status and retrieves processes to use in the flow.\n-   **[Map Processes Data Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/map-processes-data-activity.md)**  \nThe Map Processes Data flow action maps Carbon Black process data within the flow.\n-   **[Legacy: Capability Execution Tracking - Complete Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/capability-execution-tracking-complete.md)**  \nThe Capability Execution Tracking - Complete flow action updates the audit record when the flow is complete.\n-   **[Close Session Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/close-session-activity.md)**  \nCloses a Carbon Black session within the flow.\n\n**Parent Topic:**[Security Operations Integration- Get Running Processes capability](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/get-running-processes-capability.md)\n\n"}}