Build your playbook

Build a playbook by adding tasks, inputs, and logic.

Depending on your use case, you can use or customize a system playbook or develop a new playbook from scratch.

Developing a new playbook from scratch enables a tailored solution for your use case, whereas customizing a system playbook can save time, reduce complexity, and be a more efficient way to meet your organization's specific security and issue response needs.

Important

The ability to create, edit, or share custom playbooks is governed by access management. If certain options are unavailable, contact your administrator.

Follow these steps to build a playbook.

Task	Description	See More
Task 1. Choose from existing playbooks or create your own	Search for an out-of-the-box playbook to use, customize it, or create one based on your use case. Use the Automation Engineer agent to create, modify, and query playbooks (preview).	See topic.
Task 2. Configure playbook settings	Define playbook settings, such as playbook triggers, inputs and outputs, and general settings.	See topic.
Task 3. Add objects from the Task Library	The Task Library contains AI prompts, scripts, sub-playbooks, and tasks that enable you to communicate with end users, set conditions, and store relevant data.	See topic.
Task 4. Customize your playbook	Customize your playbook, including adding scripts and sub-playbook loops, filtering and transforming data, extracting indicators, extending context, creating issue fields, and polling.	See topic.
Task 5. Test your playbook	Set breakpoints, conditional breakpoints, skip tasks, and input and output overrides in the playbook debugger.	See topic.
Task 6. Manage playbook content	Save versions of your playbook.	See topic.

Add a group

1. Click + Add Input Group or + Add Output Group.
2. Enter a group name and description and click the check mark.
3. Add fields to the group.

Note

If you do not add any fields, the group will be deleted when you click Save.