Time to Contain

Action catalogue

An action catalogue is the list of actions a platform can take on connected tools, such as isolate a host or disable a user. Its size is a count of actions, and it differs from a count of integrations. Read the list for the actions you need, not the headline number.

Definition

Counts mix units. One vendor counts actions, another counts integrations or packs. A tool with one integration can offer ten actions.

The scorecard on this site checks 25 specific actions against vendor documentation, which is a more useful measure than any headline count.

Action catalogue in Splunk SOAR's documentation

Splunk SOAR's product page states 2,800+ automated actions across 300+ third-party tools, an action count and a tool count together, though the page does not list the actions. vendor claim splunk.com, read

The example names a vendor and its own page. A vendor's use of Action catalogue may differ from the definition above; the rubric uses the definition on this page.