Helping Hand Questions for PCSAE

The Debugger panel to test data with one of last five incidents. This will affect the incident’s original incident data.

Context data from existing incidents by exporting the YAML data from incidents and importing it to playbook editor.

Debugger panel and XML data from a similar incident with New Mock Incident. This will not affect the incidents original incident data.

The Debugger panel to test data with one of last fifty incidents. This will not affect the incident’s original incident data.

To loop the sub-playbook over all context values present in the investigation

To loop the sub-playbook over all incident fields for the given incident

To loop the sub-playbook over all the fields marked as important

To loop the sub-playbook over all defined sub-playbook inputs

created:>=”7 days”

owner===admin

role is Analyst

status:closed –category:job

Manually directly from the War Room with the Actions drop-down

From the Notes section (mark as entry icon)

Manually from the playbook task (mark as entry icon)

Automatically from playbook tasks when the option is selected on the Advanced tab

By running the command !MarkAsEvidence