Trigger a Playbook Manually

If a playbook is configured to be allowed for a threat, Threat Manager displays a Threat Response button on the allowed threat.

trigger a playbook manually.

Step 1 – Navigate to the Threat Details Page for a user with a threat type associated with a playbook.

Step 2 – Click the Threat Responsebutton. The Threat Response window opens. Select a playbook from the dropdown list to respond to the threat. The window also provides a description of the playbook, the status, and the timestamp for when the playbook was last executed.

Step 3 – Click Execute to execute the playbook.

After the playbook has been executed, you can view the log file on the Threat Response page in the Playbooks Execution History table.