Agents can take on several different roles that enable them to perform a variety of functions. Agents must take on at least one of these roles in order to be functional.
The default roles Agents can take are:
poller- pulls data from defined Inputs and pushes it to ReflexSOAR in the form of an Event
detector- runs Detection Rules against defined Inputs
runner** - executes ad-hoc and playbook actions against defined resources
** This role is still in development and provides no functionality at this time