Kaspersky Next XDR Expert

Deleting playbooks

Predefined playbooks cannot be deleted.

To delete a custom playbook, you must have one of the following roles: Main administrator, SOC administrator, Tier 1 analyst, Tier 2 analyst, Tenant administrator.

To delete a custom playbook:

1. In the main menu, go to Monitoring & reporting → Playbooks.
2. Do one of the following:
   • Click the name of the playbook that you want to delete. In the Playbook details window that opens, click the Delete button.
   • Select the playbook from the list, and then click the Delete button.
3. In the confirmation dialog box, click Delete.

   The playbook cannot be deleted if there are launched playbook instances. In this case, terminate all launched instances before deleting the playbook.

Deleted playbooks will only be available for viewing and copying in the Playbooks section.