Atomic Actions
Atomic actions are small, self-contained workflows that are similar to a function in traditional programming. They can consume input, perform various actions, and then return output. They are designed to be portable, reusable, and make building workflows more efficient. If the workflow is a script, the atomic action serves as a function within that script. Atomic actions most commonly provide activities in the Workflow Editor via API calls to the associated product adapters.
Cisco XDR Connect is a public catalog managed by the content team, that offers a holistic view of workflows and integrations. It includes details on the atomic actions that are built into Cisco XDR by default, which in most cases do not require additional installation or configuration. The complete, current list of atomic actions is available from the Built-in actions page.
System Objects
Atomic actions that are system objects are built into the Automation platform. They're available in all Automation tenants without needing to be imported. You still need to import any non-system atomics before importing the workflow. All of the workflows that Cisco publishes have been updated to use the new system objects. This makes them much simpler to import, as most of the prerequisite objects are already included in your tenant. You cannot modify or export system objects. Deprecated system objects cannot be added to workflows; existing workflows that contain an object that has been deprecated cannot be run.