Skip to main content

Cloud-delivered Incident ResponderIncident Responder Documentation

Playbooks

Automate your tasks, immediately neutralize attacks, and mitigate damages with Incident Responder playbooks.

A playbook is a standard, repeatable sequence of actions that respond to specific incident types, like phishing or malware, based on your best practices. It automates your workflow and completes complex, manual, and repetitive tasks so you quickly identify and address incidents.

You design a logic flow that triggers the playbook under certain conditions. Then, the playbook automatically runs the relevant responses. You make workflows semi-automated so it runs at the push of a button, or fully automated so it runs without any human intervention.

You manage a playbook and track its history in an incident's workbench.The Workbench

You can create your own playbook from scratch, create a playbook from a pre-designed template, or run a fully configured turnkey playbook.Create a PlaybookPlaybook TemplatesTurnkey Playbooks