When I was reviewing Red Canary, I noticed that one of the connected playbooks was showing a message that says "Playbook is unsupported". What does this message mean? Is there something that I can do to resolve this matter?
Red Canary Automation
The playbook may contain actions that are not compatible with the Trigger that was configured. For example, if a Trigger was created for "When a Threat is published", the playbook should not contain actions that are associated with External Alert data/events (and vice versa). Ensure that the playbook actions are compatible with the Trigger that it is being connected to.
Automate Playbook Will Fail If The Trigger Is Set For External Alert Data, But the Playbook Is Configured For Threat Data
Please sign in to leave a comment.