Both the manual actions and the actions that appear in the Playbook are populated after you download the corresponding integration in the Google Security Operations Marketplace.
To perform a manual action:
In the selected case, click Manual Action located on the right side under the Case Top Bar. The Manual Action dialog box displays.
Select the required action. For example, select VirusTotalV3 > Enrich URL. Make sure to fill in the required information.
Select the alerts and entities that you want the action to run on. Click Execute. The action details will appear on the case wall.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-12-24 UTC."],[],[]]
Manual Action located on the right side under the Case Top Bar. The Manual Action dialog box displays.