---
title: Add capability details
description: Select the capabilities that you want to include in your integration.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/choose-capabilities.html
release: australia
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Add an integration, Use SIR Integration Builder, LLM-powered SIR integration builder, Security Operations]
---

# Add capability details

Select the capabilities that you want to include in your integration.

## Before you begin

Role required: sn\_si\_int\_kit.integration\_creator

## Procedure

1.  From the **Capabilities** list, select all the capabilities supported by the integration.

    The following is the list of available capabilities:

    -   Block Request
    -   Enrich Observable
    -   Get File
    -   Get Host Details
    -   Get Logged On Users
    -   Get Network Statistics
    -   Get Running Processes
    -   Get Running Services
    -   Isolate Host
    -   Publish to Watchlist
    -   Remove Isolation
    -   Sandbox Submission
    -   Sighting Search
    -   Threat Lookup
    \[Omitted image "capability-details.png"\] Alt text: Selected capabilities

2.  Select **Save changes**.

3.  Select **Next** to add APIs.