---
sourceDocument: Xanadu Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/security-management

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Playbook for Manual Phishing

# Playbook for Manual Phishing {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Manual Phishing Playbook provides step-by-step guidance for your analysts on how
they can manually resolve specific types of security threats in your phishing
activities.

## Overview {#playbook-manual-phishing__section_v51_vcw_fwb}

The Manual Phishing Playbook template is designed to perform the phishing response tasks
manually and includes a sequence of actions that includes trigger conditions. You can use the
PAD templates to perform the steps in the phishing response playbook and resolve these incidents
efficiently.

This playbook can be used if a security incident is created or updated. You need to activate
the Manual Phishing Playbook on the Process Automation Designer (PAD) and then perform all the
tasks, such as analysis, contain, eradicate, and review.

The following are the stages of the process definition and correspond to the security incident state:

* Analysis
* Contain
* Eradicate
* Review

{#playbook-manual-phishing__ul_hf3_xcw_fwb}

Each stage has activities within it.
Figure 1. Manual Phishing playbook

Once you mark a task complete in a stage, you can move to the next task. You can save a task at any point in time and return to the playbook at a later date and time. After you complete all the tasks in a stage, you can move to
the next stage. The status is reflected in the left-hand panel as you keep completing tasks and stages. An Activity Log on the right-hand side of the playbook shows all the data that you have entered for each task.

After you complete all the tasks, you're asked to review the details you entered in all the stages. You can choose to edit any field or click Finish to complete the process of creating the entitlement.
* **[Create playbooks for Manual Phishing in Workflow Studio](https://www.servicenow.com/docs/L6tlc64lp3xPdq4EjMznAA)**   
  Use these steps to create playbooks for Manual Phishing in Workflow Studio.
* **[Using the Manual Phishing playbook](https://www.servicenow.com/docs/t4feg5lKFOZxjE4kYf2wGA)**   
  Use these steps to learn how you can use the Manual Phishing playbook in the SIR Analyst Workspace and its capabilities.
* **[Workspace Playbook summary](https://www.servicenow.com/docs/T5cuhhLGTyJVKjMycLpjMA)**   
  The following describes the process summary.