Skip to content

Commit b548729

Browse files
templetontsaiTempleton Tsai
andauthored
Find the common process in the given playbooks instructions (#82)
Co-authored-by: Templeton Tsai <temptsai@Templetons-MacBook-Pro.local>
1 parent f1ace26 commit b548729

1 file changed

Lines changed: 15 additions & 0 deletions

File tree

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
2+
I am a playbook designer and automation developer in ServiceNow. My goal is to identify and abstract reusable components from playbooks to streamline automation processes in Process Automation Designer. To ensure the flow or automation is reusable, these components should be converted into subflows or actions within Flow Designer.
3+
4+
For example, consider the following abstraction points in these two playbooks:
5+
6+
Playbook 1:
7+
8+
An EDR detects abnormal activity and creates a notable event in the ticketing system.
9+
The analyst determines the activity is malicious and performs a file hash block in the EDR solution.
10+
The infected endpoint requires reimaging. Initiate the rebuild process for the Microsoft endpoint.
11+
Playbook 2:
12+
13+
A phishing alert is raised after a user clicks on a phishing link.
14+
The analyst identifies the URL in the message body as malicious and blocks the URL via proxy and the email sender in the email security service.
15+
The user's credentials are compromised, requiring a password reset in Azure AD. Initiate the password reset process in Azure AD.

0 commit comments

Comments
 (0)