Home
Automations
Customization in Playblocks
Playblocks provides flexible customization options to tailor automations according to your organization's needs.
Delete File on Endpoint Security Device

Important Information
Introduction to Playblocks
Getting Started
Video Tutorials
Overview
Automations
- Automation Parameters and Flowchart
- Predefined Automations
- Configuring the Automation Parameters
- Running the Automation
- Enabling the Automation
- Approving, Rejecting or Reverting an Automation Execution
- Customization in Playblocks
  Playblocks provides flexible customization options to tailor automations according to your organization's needs.
  - Creating Automation from Blank
    Creating an automation from blank allows you to build fully customized flows from scratch and tailor every step to your specific use case.
  - Log Trigger
    Configure a Log Trigger to monitor logs, define conditions, and create example outputs for automation workflows.
  - Schedule Trigger
    Configure a schedule trigger to run automation at recurring intervals. The task explains how to select the repetition frequency and create the trigger.
  - Managing Trigger
    Learn how to manage a trigger by adding notifications, enrichments, conditions, or actions.
  - Notifications
    Configure notification actions including Notify, Ask, and Open Ticket options. This task explains how to create and customize notification messages and ticket actions.
  - Alert Steps
    Alert steps let an automation drive an incident through its full on-call lifecycle in PagerDuty and other alerting platforms behind the same vendor-neutral steps.
  - Enrichments
    Use enrichment steps to query the Reputation Service for IP addresses, URLs, or file hashes from previous step outputs. The enrichments provide threat intelligence data about the selected value.
  - Conditions
    Use conditions to create branches in the automation flow based on logical evaluations. This task explains how to configure condition expressions and operations.
  - Actions
    Action steps perform operational tasks such as running automations, managing indicators, and sending external API requests.
  - Run Automation
    Run an automation action and configure automation parameters and inputs for supported automation types.
  - Add to List
    Use the Add to List procedure to add IPs, URLs, domains, or hashes to a list with optional conditions and duration settings.
  - Create IoC Management Indicators
    Create IoC Management indicators by specifying indicator values and expiration settings in the Create IoC Management Indicators window.
  - API Request
    Configure an API Request action in an automation and define the example output structure for API responses.
  - AI Request
    Use the AI Request step to send a prompt to a connected AI provider and use the model's response in subsequent steps.
  - Isolate Endpoint Device
    Configure and create an isolation action for an endpoint device. Specify the endpoint product, device details, isolation duration, and reason for isolation.
  - Scan Endpoint Security Device
    Scan an Endpoint Security device by configuring target identification, scan options, and scheduling parameters.
  - Terminate Process on Endpoint Security Device
  - Delete File on Endpoint Security Device
  - Exporting/Importing Automation
    You can export and import an automation in JSON format. This task explains how to export an automation and import an automation file.
  - Cloning Existing Automation
    You can clone an existing automation for editing and customization. This task explains how to clone an automation from the card view and table view.
  - Creating Automation by AI Copilot
    AI Copilot allows you to create custom Playblocks automations using natural language prompts. This topic explains the supported capabilities, limitations, and steps to create an automation.
  - Automation Capabilities
    This topic describes the different automation capability types, their use cases, abilities, and editing restrictions.
  - Replace Trigger
    Replace Trigger allows you to change the current trigger type in your automation to a different one. This topic explains how to replace a trigger, configure the new trigger, and resolve validation errors.
  - Adding a Step to the Middle of an Automation
- Webhooks
- Authentications
Monitor
Executions
Pending Actions
Lists
Connectors
Notifications
Appendix

Delete File on Endpoint Security Device

This task describes how to configure a Delete file on Endpoint Security device action to remove a specific file from an endpoint device.

Select Delete file on Endpoint Security device and then click Add.
The Delete file on Endpoint Security device window appears.
Specify these:
- Target type - Select how to identify the device:
  - computerName
  - computerId
  - computerIp
- Target value - Enter the value that matches the selected target type, or select a value from previous step outputs or automation parameters.
- Absolute path - Enter the full path of the file to delete.
- Comment - Optional comment for the action.
- Action will expire after - Select when the action expires.
- Schedule action to start in - Select when to start the action. Use 0 to run immediately.
- Inform user - Notify the endpoint user with a UserCheck popup message.
- Allow postpone - Allow the endpoint user to postpone the operation.
Click Create.

29 July 2026