Developing Phantom 4.8 Playbooks

Developing Phantom 4.8 Playbooks


This 9 hour course prepares IT and security practitioners to plan, design, create and debug playbooks for Phantom.


  • Automation best practices
  • The visual playbook editor
  • Using actions and decisions
  • Using action results
  • Testing and debugging playbooks
  • User interaction
  • Output formatting
  • Complex logic
  • Interacting with artifacts
  • Using the vault in a playbook
  • Custom lists





2 Days


Module 1 – Introduction to Playbooks

  • Understand automation best practices
  • Design playbooks
  • Python support
  • Use the playbook manager

Module 2 – Visual Playbook Editor

  • Use the visual playbook editor
  • Use actions and decisions
  • Process action results
  • Test new playbooks

Module 3 – User Interaction and Logic

  • Interact with users during playbook execution
  • Format outputs
  • Use decision blocks

Module 4 – Accessing and Formatting Data

  • Accessing action results
  • Accessing artifact and container data
  • Formatting data

Module 5 – Modular Playbook Development

  • Calling other playbooks
  • Creating artifacts
  • Sending email
  • Passing data between playbooks
  • Module 6 – Custom list and Filters

    • Custom list concepts
    • Create custom lists
    • Access lists from playbooks
    • Use filters




    Introduction to Phantom


    Experience with Python Programming


    Onsite Training

    For groups of three or more

    Request Quote

    Public Training

    APAC Singapore - Virtual

    AMER Pacific Time - Virtual

    AMER Eastern Time - Virtual

    EMEA UK Time - Virtual

    Classes marked with Full are full and no additional registrations are accepted. If you cannot find another class that suits your schedule, feel free to request a class and we will do our best to accomodate your needs.

    Don't see a date that works for you?

    Request Class