Gartner Report: 
Playbooks
Intelligence-Driven Orchestration
Client Apps
Client Apps to send a customizable messages (e.g., email, Slack)
Make Informed Decisions. Take Action.
ThreatConnect’s Playbooks feature automates almost any cybersecurity task using an easy drag-and-drop interface - no coding needed. ThreatConnect uses Triggers (e.g., a new IP address Indicator, a phishing email sent to an inbox) to pass data to apps, which perform a variety of functions, including: data enrichment, malware analysis, and blocking actions. Once enabled, Playbooks run in real time and provide you with detailed information about each run. Playbooks are available in TC Manage™ and TC Complete™.
GET STARTED NOW
Create Your Free Account
Automate Nearly Any Cybersecurity Task
- Choose from ThreatConnect-provided Playbook templates or build your own to automatically run based on events in your network
- Easily send indicators to any of ThreatConnect’s 100+ integration partners including firewalls, SIEMs, and more
- Ingest and send data from any tool (including tools not yet integrated with ThreatConnect)
Speed Up Decision Making
- Time consuming tasks are reduced from hours to seconds; use built-in tasks to loop your team in at critical decision points
- With the ROI Calculator, track the return on investment of your automation and orchestration activities
- Use the Playbooks Debugger to optimize more advanced playbooks (when integrating with multiple third-party applications)
Save Your Team Time and Money
- Use threat intelligence to increase the accuracy, confidence, and precision of your Playbook actions
- Run Playbooks directly from your threat intelligence
- Improve and adapt processes in real time, and use Playbooks Components to bundle single elements from a process and easily re-use the elements in other playbooks
Playbooks in Action
Playbooks are available in TC Manage™ and TC Complete™.
1
2
3
4
5
6
1
Begin with a Trigger, which is an event that initiates a Playbook to run.
2
Use Apps to take action in response to a Trigger.
3
Use Operators to link between Triggers and Apps (e.g. If/Else command).
4
Use the Playbook configuration Screen to create or edit a Playbook. Everything is drag and drop with no coding needed.
5
Execution and Steps show you if and when Playbooks ran and what steps were taken, making it easy to adjust processes in the future.
6
Easily configure Playbooks to align with almost any of your current cybersecurity processes or use cases.