Disconnect Active Remediation Automated Playbooks

Four playbooks are automatically created when a customer enables any Active Remediation (AR) subscription. The four books are:

• AR — Unsupported OS Detected

• AR — Malicious/Suspicious Threat has new IOC

• AR — Malicious/Suspicious Threat Published

• AR — Notes Added by Red Canary

If you no longer use the AR subscription, you may need to manually remove the AR templated playbooks. Click the Disconnect icon to disconnect, but not delete the playbook.

Alternatively, to remove a playbook’s association to a trigger click the playbook, and click Delete from the left-hand menu.