Kaspersky Next XDR Expert

Terminating playbooks

You can forcibly terminate the launched playbook. In this case, the uncompleted response actions will be terminated. The completed response actions will not be canceled after the termination of the playbook.

To terminate a playbook, you must have one of the following roles: Main administrator, Junior analyst, Tier 1 analyst, Tier 2 analyst, Tenant administrator.

To terminate a playbook:

1. In the main menu, go to Monitoring & reporting → Playbooks.
2. In the Playbook details window that opens, go to the History tab.
3. In the list of the launched playbook instances, select one or several instances that you want to terminate, and then click the Terminate button.
4. In the window that opens, click Terminate.

The playbook is terminated.