Manually trigger a playbook

Automation playbooks are designed to be executed by triggers or manual execution. There are many use cases for manual execution, including testing a new playbook to ensure it works as expected and executing certain remediation playbooks that should only be triggered by your team.

Playbooks can be executed against any of the threats, endpoints, and endpoint users in Red Canary.

You can manually execute a playbook by selecting an object that you’d like to execute against.

To manually trigger a playbook...

1. When viewing any playbook, click Run.
2. Select an object type to execute against.
3. Select an object of that type.
4. Click Run.

The playbook will begin executing. Click Follow along with the progress here in the resulting dialog to see the results.