Playbooks

Playbooks can be composed and built using Azure Logic Apps technology. Once your playbook is created, you can see them in the CDC, in the Playbooks tab of a relevant alert. Here you can see detailed actions related to your playbook, and view which activities were completed, pending, or in progress for your playbook.

You can quickly create your own playbook in a visual way, save it, and publish it.

When you click to open your playbook, you will see a detailed flowchart with all of the activities your playbook includes.

Each step or note in the playbook that is written to the chat can be seen there. For example, you can see the input and output for a particular action. The inputs and outputs provide dynamic information about each operation.

Completing Pending Actions

A yellow dot next to the Playbooks tab indicates that there is a pending action that still needs to be done on the playbook. When you go into the playbook you will see the yellow dot and the word Pending connected to the action that needs to be completed (actions that are already completed are marked with a green dot).

The following is an example of a Pending Task screen.

You can now add evidence or files as needed, to complete the action. Click Mark as Done when finished, and you will see a User Task Added notification in the chat on the side.