Custom Special Action Fields

These fields apply to the custom_special_action_added, custom_special_action_changed, and custom_special_action_removed events.

Field Value Explanation

arguments

list

Command line arguments to apply the command.

command

string

The full path of the application to run.

confirm

1 or 0

1: Require users to answer a confirmation prompt before the action runs.
0: Do not prompt before running the action.

id

string

The unique identifier of this custom special action.

name

string

The name of this custom special action.

run_elevated

1 or 0

1: Show the special action only when the endpoint client is running in elevated mode, and run the action with elevated privileges.
0: Always show the action, and run the action with user privileges.