Home
Appendix
This appendix provides links to supporting procedures for integrating various external services with Check Point Playblocks. It lists additional configuration resources for multiple platforms.
Appendix G - Using Custom Automation Step Schemas
This topic describes parameter schemas for supported step types in custom automations and references the full Automations API documentation. It provides validation rules and dynamic reference details for automation steps.
Parameter References
This topic describes supported parameter reference types and how they enable dynamic retrieval of values from automation steps or parameters. It also outlines the characteristics of each reference type.

Important Information
Introduction to Playblocks
This topic introduces the automated response capabilities of PlayBlocks and its integration with collaborative tools. It provides an overview of how PlayBlocks helps protect organizations from cyber attacks.
Getting Started
This topic describes the initial steps required to begin working with PlayBlocks. It provides links to create an account, access the portal, license the product, and onboard services.
Video Tutorials
Overview
This topic describes the Overview page, which displays key information and statistics about Playblocks. It explains how to access the Overview page and view its data.
Automations
This topic describes the Automations page and its interface elements. It provides details about automation categories, views, filtering options, and automation card components.
Monitor
This topic describes the Monitor page, which displays statistics and visual widgets showing automation activity and prevention data. It summarizes the available monitoring views and their functions.
Executions
This topic describes the Executions page and how to access it. It provides an overview of the information shown for executed automations.
Pending Actions
This topic describes the Pending Actions page, which lists automation executions awaiting approval. It also explains how to access this page in Playblocks.
Lists
This topic describes the Lists page, which shows various types of destinations, sources, devices, and identities managed by the system. It explains the purpose of each list category.
Connectors
This topic describes connectors used in Playblocks and explains how they support automatic incident response and collaboration. It also shows how to access the Connectors page and identifies automatically connected products.
Notifications
The Notifications page provides options to manage who receives notifications and how they are delivered. It also displays legends describing available actions and views.
Appendix
This appendix provides links to supporting procedures for integrating various external services with Check Point Playblocks. It lists additional configuration resources for multiple platforms.
- Appendix A - Creating a User with Specific Roles in ServiceNow
  This task describes how to create a ServiceNow user and assign specific roles for use with Playblocks. It includes login steps, user creation, password setup, and role configuration.
- Appendix B - Creating an Incoming Webhook in the Slack Channel
  This task describes how to create an incoming webhook in a Slack channel. Follow the steps to configure a Slack application and obtain the webhook URL.
- Appendix C - Creating Workflow for Microsoft Teams Notification
  This task describes how to create a workflow for Microsoft Teams notifications using Microsoft Power Automate. Follow the steps to configure triggers and actions for Teams webhook requests.
- Appendix D - Creating an API Token in Atlassian Account
  This task describes how to create an API token in an Atlassian account for Jira integration with Playblocks. It includes step-by-step instructions for generating and copying the token.
- Appendix E - Integrating CrowdStrike Falcon
  This topic describes how to integrate Check Point Playblocks with CrowdStrike Falcon to enable automated alert handling and response actions. It outlines the steps required to configure API access in the CrowdStrike Falcon portal.
- Appendix F - Creating a SentinelOne Service User
  This task describes how to create a SentinelOne service user with specific role permissions. It guides you through configuring roles, permissions, and generating an API token.
- Appendix G - Using Custom Automation Step Schemas
  This topic describes parameter schemas for supported step types in custom automations and references the full Automations API documentation. It provides validation rules and dynamic reference details for automation steps.
  - Parameter References
    This topic describes supported parameter reference types and how they enable dynamic retrieval of values from automation steps or parameters. It also outlines the characteristics of each reference type.
  - Step Categories
    This topic lists the available step categories used within automation workflows. It provides quick navigation to each category type.
  - Triggers
    This topic describes trigger types and their parameters for automation workflows. It includes log, schedule, and webhook triggers with detailed parameter schemas and examples.
  - Notifications
    This topic describes notification-related automation steps including Ask, Notify, and Open Ticket. It provides parameter schemas, detailed descriptions, and examples.
  - Enrichments
    This topic describes enrichment steps that gather additional information about IPs, URLs, and files. It includes parameter schemas, details, and examples for each enrichment type.
  - Conditions
    This topic describes conditional logic steps used in automation flows and details their parameters and usage. It includes schema definitions, parameter descriptions, and example structures.
  - Actions
    Describes actions, schemas, parameters, and examples for automation, list management, IOC creation, and running automation tasks. Provides detailed structures and valid input formats.
  - Common Data Types
    This topic describes common structured data types used for duration values and event detail definitions. It includes specifications for TimeInterval and EventDetails formats.
  - Parameter Behavior and Validation Notes
    Describes rules for parameter behavior, validation requirements, optional fields, string length limits, and trigger output expectations in automation flows.
- Appendix H - Webhooks and Authentications
  This topic introduces REST APIs related to webhooks and authentications used in Playblocks automations.
- Appendix I - Creating a PagerDuty General Access Key
  This appendix describes the one-time setup in PagerDuty that the PagerDuty Alerting connector requires.

Parameter References

This topic describes supported parameter reference types and how they enable dynamic retrieval of values from automation steps or parameters. It also outlines the characteristics of each reference type.

Supported Reference Types

Many parameters support Parameter References that allow you to dynamically reference values from previous steps or automation parameters:

Step References: {{step['Step Name']['field_name']}} - References output from a previous step in the automation flow
Automation Parameter References: {{automationParam['parameter_name']}} - References user-defined automation parameters that are passed when the automation is executed

Reference Types

ParamRef:
- Supports step outputs and Automation parameters.
- Most flexible and used where dynamic behavior is expected.
AutoParamRef:
- Supports automation parameters only and step references not allowed.
- Restricts to inputs provided by the user during automation execution.

03 July 2026