asp-playbook-en

To execute an ASP playbook, you select an available playbook definition and run it against a target case, alert, or artifact. The Skill applies defined input structures and safety checks before triggering the automation.

You can list available playbook definitions by requesting the Skill to discover runnable ASP playbooks. This feature helps security teams identify existing automation workflows and understand their purpose for faster decision-making.

Yes, you can inspect playbook run records by filtering for target object, type, or job status. This allows security teams to track the progress and history of automation tasks executed during investigations.

ASP playbooks are used to automate incident response tasks within SOAR workflows. They allow security teams to execute predefined actions against cases, alerts, or artifacts, enabling faster and more consistent investigation outcomes.

You can check the job status of a previously executed playbook by inspecting the playbook run records. The Skill allows you to filter these run records by job status to track the automation progress effectively.