Sample Playbooks for SIR Workspace

You can create or configure playbooks for SIR Workspace quickly and easily without writing complicated code. You can use these playbooks to resolve security threats in a step-by-step manner. You can invoke the security incident playbook flow automatically or manually.

The Security Incident Response provides the following playbooks with the base system:

• Playbook for Manual Phishing
• Playbook for Automated Phishing
• Playbook for Manual Malware
• Playbook for Automated Malware
• Playbook for Failed Login Manual

Related concepts

• Working with Security Incident Records
• Security Incident Playbook
• Prerequisites for the Playbooks
• Rebuilding existing playbooks in Workflow Studio
• Activity Definitions
• Working with MSI Records
• Working with Form UI actions

Related tasks

• Security Incident Closure workflow
• Handle security incidents using Advanced Work Assignment