Process-based Playbooks

The playbook component works only for playbooks built in Workflow Studio and not for flows. However, existing flow-based playbooks will continue to work and the activities will be continuing to be rendered as response tasks.

Security Incident Response provides the following playbooks with the base system.

• Playbook for Manual Phishing
  The Manual Phishing Playbook provides step-by-step guidance for your analysts on how they can manually resolve specific types of security threats in your phishing activities.
• Playbook for Automated Phishing
  The Automated Phishing playbook provides step-by-step guidance for your analysts on how they could resolve specific types of security threats in your Automated Phishing activities.
• Playbook for Manual Malware
  The Manual Malware playbook provides step-by-step guidance on how analysts can manually resolve malware alerts more efficiently.
• Playbook for Automated Malware
  The Automated Malware playbook provides a sequence of automated steps that helps analysts resolve malware alerts more efficiently.
• Playbook for Failed Login Manual
  The Failed Login Manual playbook provides guidance and helps optimize the investigation of failed login security incidents.

関連概念

• Flow-based Playbooks