Task 1. Choose from out-of-the-box playbooks or customize your own - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2025-03-17
Category
Administrator Guide
Abstract

Use an out-of-the-box playbook, create a new playbook, or customize an existing one based on your organization's needs.

You can use or customize an existing playbook or create a new playbook.

You can easily navigate playbooks and focus on the parts you need to work on by collapsing and expanding playbook sections. Collapsing sections provides a condensed view of the playbook flow, reducing visual clutter and enabling quick access to specific sections. Expanding sections allows you to view or edit specific parts of a playbook while keeping the rest of the playbook compact and maintaining focus on the relevant playbook details. You can also hover over a Section Header to highlight all tasks under the section and easily identify the section scope.

To collapse and expand a section, in the Playbooks page, after selecting a playbook from the library or creating a new playbook and adding tasks, click playbook-expand-collapse.png on a section header.

When you collapse a section, you can see the number of tasks included under the section. For example:

playbook-collapsed-num-tasks.png

Click playbook-collpase-expand-all.png to collapse or expand the entire playbook.