SYNOTI / Automation
Automation
SOAR playbook execution and run history.
Active Playbooks
64
52 in production · 12 draft
Runs / 24h
1,289
18% vs last week
Success Rate
97%
1,250 succeeded · 39 failed
Hours Saved / 24h
142
≈ 18 FTE days / month
Avg. Duration
6.4s
per run
Run History
| Run ID | Playbook | Trigger | Status | Duration | Steps | Triggered By |
|---|---|---|---|---|---|---|
| RUN-88421 | PB-041 Ransomware | EDR alert | Success | 7.8s | 14/14 | Auto |
| RUN-88420 | PB-019 Phishing | Email event | Success | 3.9s | 9/9 | Auto |
| RUN-88419 | PB-037 DNS Sink | IDS alert | Running | 6.1s | 5/12 | Auto |
| RUN-88418 | PB-022 Cred | VPN log | Success | 11.2s | 16/16 | S. Mitchell |
| RUN-88417 | PB-053 Malware | Hash submit | Failed | 34.0s | 8/11 | Auto |
| RUN-88416 | PB-008 Recovery | Manual | Success | 62.4s | 21/21 | A. Rodriguez |
| RUN-88415 | PB-041 Ransomware | EDR alert | Success | 9.1s | 14/14 | Auto |
| RUN-88414 | PB-019 Phishing | Email event | Success | 4.4s | 9/9 | Auto |
| RUN-88413 | PB-022 Cred | AWS GuardDuty | Failed | 15.8s | 10/16 | Auto |
| RUN-88412 | PB-041 Ransomware | EDR alert | Success | 8.0s | 14/14 | Auto |
SOAR Actions
| Action | Type | Runs / 24h | Status |
|---|---|---|---|
| Isolate endpoint | response | 412 | Active |
| Block IP — firewall | defense | 341 | Active |
| DNS sinkhole | defense | 318 | Active |
| Kill process | response | 204 | Active |
| Quarantine file | response | 96 | Active |
| Restart service | recovery | 128 | Active |
Automation Runs / 24h
Success by Playbook
Recent Activity
View allIncident INC-32464 opened — high CPU on app-02 CRITICAL
Auto-remediation playbook PB-031 triggered
Worker k8s-07 at 91% load
Auto-scaled +2 workers to queue 'scan'
Backup completed — 1.4 TB in 8m 12s
Snapshot verified · retention 30 days
Sync task 's3-archive' finished
2,104 objects · 0 conflicts
phy-12 added to monitoring
18 agents enrolled · health 100
Task T-9912 'patch-cron' succeeded
Ran on 96 hosts · 0 errors