I created a bunch of SOAR playbooks to detect auth issues? But SecOps says "There are no available test cases." How do you validate the test cases in this scenario?
Page 1 / 1
Hey @ibr1 ,
Test cases can be created from existing Alerts. Here is how you would do it:
Note: you will need to refresh the playbook page after test case will be created for it to be available in the simulation mode.
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.