Activate the Threat Hunting Playbook

  • Release version: Australia
  • Updated May 20, 2026
  • 1 minute to read

    • By default, the Threat Hunting playbook is deactivated. Activate it in Workflow Studio to initiate the playbook automatically for the applicable Case records.

    Before you begin

    Role required: admin

    About this task

    Activate the playbook to initiate it for the applicable Case records.

    Procedure

    1. Navigate to All > Workflow Studio.
    2. In Playbooks, open the Threat Hunting playbook.
    3. Optional: To test run the playbook, select Test and enter a case record.
    4. Select Activate.