Views:

View the required entitlement needed to access each type of playbook.

The availability of certain playbook templates and the ability to execute playbooks depends on your license entitlement for the associated TrendAI Vision One™ features and the required data source configuration in Cyber Risk Exposure Management.
To view the credits needed for each required entitlement, see Credit requirements for TrendAI Vision One™ solutions.
The following table details the requirements for each playbook type.
Category
Type
Template
Required Data Source
Required Entitlement
Cyber Risk Exposure Management
Account risks
Account Response
  • Microsoft Entra ID
  • Active Directory (on-premises)
Cyber Risk Exposure Management
Automated High-Risk Account Response
  • Microsoft Entra ID
  • Active Directory (on-premises)
Risk events
Risk Event Response
Data sources in Cyber Risk Exposure Management
Vulnerability
CVEs with Global Exploit Potential - Internal Assets
  • XDR Endpoint Sensor
  • Third-party data sources (Nessus Pro, Qualys, Rapid7, or Tenable.io)
CVEs with Global Exploit Potential - Internet-facing Assets
Root domain configuration in Attack Surface Discovery
CVEs with Global Exploit Potential - Containers
Container configuration
CVEs with Global Exploit Potential - Cloud VMs
Cloud virtual machine (VM) configuration
Agentic SIEM & XDR
General
Endpoint Response
XDR Endpoint Sensor
Agentic SIEM & XDR
XDR detection
Automated Response Playbook
Data sources / processors in Agentic SIEM & XDR
Workbench Insight Progression Update
Data sources / processors in Agentic SIEM & XDR
Threat detection
Incident Response Evidence Collection
XDR Endpoint Sensor
  • Agentic SIEM & XDR
  • Credit usage for the Forensics app