Creating an automation from blank allows you to build fully customized flows from scratch and tailor every step to your specific use case.

Configure a Log Trigger to monitor logs, define conditions, and create example outputs for automation workflows.

Configure a schedule trigger to run automation at recurring intervals. The task explains how to select the repetition frequency and create the trigger.

Learn how to manage a trigger by adding notifications, enrichments, conditions, or actions.

Configure notification actions including Notify, Ask, and Open Ticket options. This task explains how to create and customize notification messages and ticket actions.

Use enrichment steps to query the Reputation Service for IP addresses, URLs, or file hashes from previous step outputs. The enrichments provide threat intelligence data about the selected value.

Use conditions to create branches in the automation flow based on logical evaluations. This task explains how to configure condition expressions and operations.

Action steps perform operational tasks such as running automations, managing indicators, and sending external API requests.

Run an automation action and configure automation parameters and inputs for supported automation types.

Use the Add to List procedure to add IPs, URLs, domains, or hashes to a list with optional conditions and duration settings.

Create IoC Management indicators by specifying indicator values and expiration settings in the Create IoC Management Indicators window.

Configure an API Request action in an automation and define the example output structure for API responses.

Use the AI Request step to send a prompt to a connected AI provider and use the model's response in subsequent steps.

Configure and create an isolation action for an endpoint device. Specify the endpoint product, device details, isolation duration, and reason for isolation.

Scan an Endpoint Security device by configuring target identification, scan options, and scheduling parameters.

You can export and import an automation in JSON format. This task explains how to export an automation and import an automation file.

You can clone an existing automation for editing and customization. This task explains how to clone an automation from the card view and table view.

AI Copilot allows you to create custom Playblocks automations using natural language prompts. This topic explains the supported capabilities, limitations, and steps to create an automation.

This topic describes the different automation capability types, their use cases, abilities, and editing restrictions.

Replace Trigger allows you to change the current trigger type in your automation to a different one. This topic explains how to replace a trigger, configure the new trigger, and resolve validation errors.