Step 1: From the Manage page in the Runbooks module, click New Runbook.
Step 2: A modal will appear. Select the methodology from the pulldown menu, then enter a title value for the runbook. Click Create.
Step 3: Select the content that should exist in the runbook by visiting the different tabs of Tactics, Techniques and Procedures and selecting the desired content. Click Save and Continue.
A message will briefly appear confirming the runbook was created.
Step 5: Enter a title, clients, tags, and description for the Engagement.
Step 6: Click Begin New Engagement.
A message will briefly appear confirming success.
Step 5: Begin managing the procedures for the engagement.
Typically, the available procedures to choose from is limited to the tactic and techniques chosen for that runbook. However, you procedures can be added to the runbook by toggling the Show all Procedures slider under the Procedures tab from the Manage page.
Runbooks can be imported into PlexTrac if the file is one of following:
- PlexTrac YAML file: a previously exported runbook now imported back into PlexTrac
- SCYTHE Community Threat: a JSON file from the GitHub repository
- MITRE Adversary Emulation Plan: a YAML file from the GitHub repository
Step 1: From the Manage page of the Runbooks module, click Import Runbook.
Step 2: From the modal, select the file import type and drag file to the provided box or click the box to navigate to the file on the computer.
Step 1: From the Manage page of the Runbooks module, click Export under the "Actions" column of the runbook to export.
Step 2: A dialog box appears asking for confirmation of action. Click Export.
A YAML file is downloading locally for edit or import into Runbooks V2.