Use case

Playbook components need to be sorted in an alphabetical and logical manner so that they are easy to select.

Current Workaround

Read and learn where the 17 components are.

Proposed Solution

Group the components in the following categories:

Start Playbook (as is currently)

Available for manual enrollment / trigger
Listen knowledge events
Listen PIR events
Query knowledge on a regular basis

Transform and Enrich

Apply predefined rule
Container Wrapper
Create Security Coverage
Enrich through connector
Extract observables from indicator
Log data in standard output
Match knowledge
Manipulate knowledge
Promote observable to indicator
Reduce knowledge

Share and Access

Manage access restrictions
Remove access restrictions
Share with organizations
Unshare with organizations

End Playbook

Send email from template
Send for ingestion
Send to notifier