{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44742,"path":"security-management/security-incident-response/playbook-endpoint-detection.md","title":"Playbook for Endpoint Detection","bundle":null,"doc_type":null,"release":"australia","body":"\n# Playbook for Endpoint Detection\n\nThis playbook provides systematic remediation steps to investigate malware alerts triggered on a host or endpoint \\(For example, a malicious file detection\\).\n\nWhen CrowdStrike alerts are triggered on a host or endpoint, you can use the Endpoint Detection playbook in the Flow Designer for guidance and help optimize the investigation of these malicious files.\n\n-   **[Set up the Endpoint Detection playbook](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/playbook-setup-endpoint-detection.md)**  \nUse the following steps to set up the Endpoint Detection playbook.\n-   **[Use the Endpoint Detection playbook](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/playbook-using-endpoint-detection.md)**  \nUse this playbook to investigate malware alerts triggered on a host or endpoint. The following steps give you a walkthrough of the actions, tasks, and subflows that are available in the Endpoint Detection playbook.\n\n**Parent Topic:**[Flow-based Playbooks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/playbook-flow-based.md)\n\n"}}