Set up the Office Malicous File Detected playbook

Use the following steps to set up the Office Malicous File Detected playbook.

Before you begin

Role required:

• sn_si.admin

• flow_designer

Make sure you have installed Security Operations Spoke (sn_sec_spoke).

Procedure

1. Login as a user with sn_si.user and flow_designer roles.

2. Navigate to All > Flow Designer and select the Office 365 - Malicious File Detected playbook.

3. You can create a copy of the Office 365 - Malicious File Detected playbook flow and make the necessary modifications.

   To create a copy of the playbook's flow, select the [Omitted image "more-action-menu.png"] Alt text: More actions menu icon and select Copy flow. Perform this step only if you plan to customize or make specific changes to the flow.

4. Activate the playbooks.

   • Activate the main flow to use the playbook available in the base system.

   • Activate the copied flows after making the required changes.

5. Set a Trigger Condition for the playbook.

   This playbook is triggered and associated with the security incident when the Category is Malicious code activity.

Parent Topic:Playbook for Office 365 - Malicious File Detected

Related topics

{Use the Office 365 Malicious File Detected playbook}[]