> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide.md).

# Playbook Design Guide

- [Playbooks](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/readme.md): Cortex XSOAR 6x playbooks enable you to organize and automate the security monitoring, orchestration, and response flow for your incident investigation.
- [What Are Playbooks?](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/readme/what-are-playbooks.md): Cortex XSOAR 6x playbooks enable you to structure and automate many of your security processes. Parse incident information, interact with users, and remediate.
- [Playbook Development](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/readme/playbook-development.md): Cortex XSOAR 6x playbooks enable you to structure and automate many of your security processes.
- [Configure IoT Security Playbooks](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/readme/configure-iot-security-playbooks.md): IoT Security playbooks in Cortex XSOAR 6x enable you to structure and automate many of your third-party security processes. Parse incident information, interact with users, and remediate.
- [Manage Playbook Settings](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/manage-playbook-settings.md): Manage Cortex XSOAR 6x playbook settings, including role access, which incident type triggers it, and options for Quiet Mode.
- [Obtain Playbook Metadata](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/manage-playbook-settings/obtain-playbook-metadata.md): Analyze Cortex XSOAR 6x playbook metadata for troubleshooting custom playbooks. Use the getInvPlaybookMetaData command.
- [Version Control](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/version-control.md): Save versions of your playbook in Cortex XSOAR 6x as you are developing it.
- [Playbook Task Fields](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields.md): All of the fields available when defining a playbook task in Cortex XSOAR 6x.
- [Create Section Headers](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/create-section-headers.md): Section headers tasks are used to manage the flow of your playbook in Cortex XSOAR 6x and help you organize your tasks efficiently.
- [Create a Conditional Task](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/create-a-conditional-task.md): Create a conditional task in a Cortex XSOAR 6x playbook.
- [Communication Tasks](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/communication-tasks.md): Communication tasks in Cortex XSOAR 6x playbooks enable you to send surveys and collect data.
- [Create an Ask Task](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/communication-tasks/create-an-ask-task.md): Create a conditional Ask task in a playbook in Cortex XSOAR 6x. An Ask task is a single question survey that determines how the playbook proceeds. Answer is recorded in context.
- [Ask Task Examples](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/communication-tasks/create-an-ask-task/ask-task-examples.md): Examples for using the Ask task to send email messages and recurring surveys in Cortex XSOAR 6x.
- [Customize an Ask Task](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/communication-tasks/create-an-ask-task/customize-an-ask-task.md): Customize the HTML and CSS template used for Ask task messages in Cortex XSOAR 6x.
- [Create a Data Collection Task](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/communication-tasks/create-a-data-collection-task.md): Create a data collection task in a Cortex XSOAR 6x playbook. Multi-question survey (form), responses are recorded in incident’s context data.
- [Data Collection Task Examples](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/communication-tasks/create-a-data-collection-task/data-collection-task-examples.md): Common configurations for Data Collection tasks in Cortex XSOAR 6x.
- [Customize a Data Collection Task](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/communication-tasks/create-a-data-collection-task/customize-a-data-collection-task.md): Customize the HTML and CSS used in Data Collection task messages in Cortex XSOAR 6x.
- [Customize the SOC Name](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/communication-tasks/customize-the-soc-name.md): Add a server configuration to customize the name of the security operations center (SOC) that appears in communication tasks in Cortex XSOAR 6x.
- [Create Communication Task Authentication](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/communication-tasks/create-communication-task-authentication.md): Configure user authentication for a communication task in Cortex XSOAR 6x.
- [Add Ad Hoc Tasks to a Work Plan](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/add-ad-hoc-tasks-to-a-work-plan.md): Add ad hoc tasks to a Work Plan in Cortex XSOAR 6x for a specific iteration of a playbook.
- [Handle Errors in a Playbook](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/handle-errors-in-a-playbook.md): When defining a task in Cortex XSOAR 6x, you can decide if the playbook continues, stops, or continues on an error path.
- [Playbook Task Fields](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-task-fields/playbook-task-fields.md): All of the fields available when defining a playbook task in Cortex XSOAR 6x.
- [Playbook Inputs and Outputs](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-inputs-and-outputs.md): Cortex XSOAR 6x playbooks and tasks have inputs (data from incident or integration) and outputs that can then be used as input in other tasks.
- [Task Cheat Sheet](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-inputs-and-outputs/task-cheat-sheet.md): Use the Cortex XSOAR 6x playbook task cheat sheet to quickly access system and custom fields for task inputs and outputs.
- [Extend Context](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/extend-context.md): Extend context to retrieve specific information from integrations or commands and map to fields in Cortex XSOAR 6x.
- [Extend Context in a Playbook Task](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/extend-context/extend-context-in-a-playbook-task.md): Extend context to retrieve additional data from integrations or commands and map to fields. Extend context in a Cortex XSOAR 6x playbook task.
- [Extend Context using the Command Line](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/extend-context/extend-context-using-the-command-line.md): Extend context to retrieve additional data from integrations or commands and map it to fields. Extend context from the Cortex XSOAR 6x command line (CLI).
- [Filters and Transformers](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/filters-and-transformers.md): Use filters and transformers to manipulate data in Cortex XSOAR 6x. Use filters and transformers in playbook tasks or when mapping an instance.
- [Create Filters and Transformers in a Playbook](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/filters-and-transformers/create-filters-and-transformers-in-a-playbook.md): Create filters and transformers in Cortex XSOAR 6x playbooks.
- [Create a Filter Example](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-example.md): Example of how to create a filter in Cortex XSOAR 6x. Filter all EWS Item names with a particular extension. filters objects transformers playbooks
- [Create a Filter (Advanced) Example](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-advanced-example.md): Advanced example of how to create a filter in Cortex XSOAR 6x.
- [Filter Operators](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/filters-and-transformers/filter-operators.md): Use filters to extract relevant data for use elsewhere in Cortex XSOAR 6x.
- [Built-in Filters](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/filters-and-transformers/filter-operators/built-in-filters.md): Description of the built-in filters available for playbook tasks in Cortex XSOAR 6x.
- [Transformers Operators](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/filters-and-transformers/transformers-operators.md): Transformers enable you to transfer or render one value to another value in Cortex XSOAR 6x. Description of system transformer operators.
- [Create Custom Filter and Transformer Operators](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/filters-and-transformers/create-custom-filter-and-transformer-operators.md): Create a custom filter or transformer in Cortex XSOAR 6x.
- [Automations](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/automations.md): Create and edit an automation in Cortex XSOAR 6x, including detach and attach, automation settings, etc.
- [Special Automation Tags](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/automations/special-automation-tags.md): Special automation tags that make an automation available to a specific area in Cortex XSOAR 6x.
- [Common Scripts to use in Automations](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/automations/common-scripts-to-use-in-automations.md): Scripts in the Common Scripts content pack and the Base content pack are available to use in other scripts in Cortex XSOAR 6x.
- [Configure a Sub-playbook Loop](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/configure-a-sub-playbook-loop.md): Configure a sub-playbook to run in a loop Cortex XSOAR 6x.
- [Sub-Playbook Loop Example](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/configure-a-sub-playbook-loop/sub-playbook-loop-example.md): This example illustrates the use of a sub-playbook loop using the Cortex XDR Investigation and Response integration Cortex XSOAR 6x.
- [Playbook Polling](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-polling.md): Cortex XSOAR 6x Generic Polling playbook enables you to periodically poll the status of a process on a remote host.
- [Create Incident Fields in a Playbook](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/create-incident-fields-in-a-playbook.md): Use the setIncident automation to set and update all system incident fields Cortex XSOAR 6x.
- [Playbook Testing](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-testing.md): Test your playbook with ingested incidents Cortex XSOAR 6x.
- [Debug a Playbook](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-testing/debug-a-playbook.md): Set breakpoints, conditional breakpoints, skip tasks, and input and output overrides in the Cortex XSOAR 6x playbook debugger.
- [Debugger Troubleshooting](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/playbook-testing/debugger-troubleshooting.md): Find and fix potential issues with the Cortex XSOAR 6x Playbook Debugger.
- [Best Practices](https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide/best-practices.md): Best practices for working with playbooks Cortex XSOAR 6x.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/playbook-design-guide/playbook-design-guide.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.