Incident ResponderRespond to Security Incidents

Manually Run a Playbook

Instead of triggering a playbook with an event, run a playbook manually on an incident from its workbench.Playbook TriggersThe Workbench

  1. In the navigation bar, click INCIDENTS

  2. Select an incident, then select View Workbench.

  3. Select RUN PLAYBOOK.

  4. Select a playbook from the list.

  5. Click LAUNCH.

    If the actions in your playbook run successfully, they appear in the workbench ACTIONS tab with a A green check mark. check mark, and you see their outputs in the workbench.

    If your playbook has finished running successfully, it appears in the workbench PLAYBOOKS tab with a A green check mark. check mark.