Playbooks

Role Availability Read-Only Investigator Analyst Manager

USM Anywhere enables you to create and manage playbooks, with which you can predetermine a set of steps that should be taken to remediate alarms generated from either a correlation rule or a custom orchestration rule. These playbooks allow you to accelerate your threat detection and incident response process by streamlining and automating common or alarm-specific workflows.

This topic discusses these subtopics: