Skip to main content

How to create test cases to validate SOAR playbooks?

  • March 26, 2025
  • 1 reply
  • 49 views

Forum|alt.badge.img

I created a bunch of SOAR playbooks to detect auth issues? But SecOps says "There are no available test cases."  How do you validate the test cases in this scenario?

1 reply

ylandovskyy
Staff
Forum|alt.badge.img+16
  • Staff
  • March 26, 2025

Hey @ibr1 ,

Test cases can be created from existing Alerts. Here is how you would do it:

Note: you will need to refresh the playbook page after test case will be created for it to be available in the simulation mode.