Incident ResponderIncident Responder Documentation

Turnkey playbooks are pre-configured playbooks that are ready for you to run, without having to purchase additional services to get the actions you need.

They are listed along other playbooks you created on the PLAYBOOKS page. Like a playbook you created yourself, you can run them manually or automatically with a playbook trigger.

These playbooks use an in-house service, Exabeam Actions, that is available out-of-the-box and free to use. The service supports basic actions, like, getting the reputations of entities and artifacts, and detonating malicious files and URLs.

There are three turnkey playbooks:

You can modify turnkey playbooks to customize them to your needs.