Developing Phantom 4.5 Playbooks

Developing Phantom 4.5 Playbooks


This two virtual-day course prepares IT and security practitioners to plan, design, create and debug playbooks for Phantom.


  • Automation best practices
  • The visual playbook editor
  • Using actions and decisions
  • Using action results
  • Testing and debugging playbooks
  • User interaction
  • Direct code editing
  • Output formatting
  • Complex logic
  • Interacting with artifacts
  • Using the vault in a playbook
  • Custom lists
  • External REST APIs





2 Days


Module 1 – Introduction to Playbooks

  • Understand automation best practices
  • Design playbooks
  • Use the playbook manager

Module 2 – User Interaction

  • Use the visual playbook editor
  • Use actions and decisions
  • Process action results
  • Test new playbooks

Module 3 – User Interaction and Logic

  • Interact with users during playbook execution
  • Format outputs
  • Use decision blocks

Module 4 – Advanced Playbooks

  • Complex logic
  • Calling other playbooks
  • Working with artifacts and files

Module 5 – Custom Lists and Filters

  • Custom list concepts
  • Create custom lists
  • Access lists from playbooks
  • Use filters
  • Module 6 – Custom Code and REST

    • Write custom code in playbooks
    • Use the REST API




    Introduction to Phantom


    Experience with Python Programming


    Onsite Training

    For groups of three or more

    Request Quote

    Public Training

    AMER Eastern Time - Virtual

    AMER Pacific Time - Virtual

    EMEA Coordinated Universal Time (GMT) - Virtual

    APAC Singapore - Virtual

    Don't see a date that works for you?

    Request Class