{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44234,"path":"security-management/security-incident-response/action-phishing-playbook.md","title":"View automated phishing response playbook flow action designer","bundle":null,"doc_type":null,"release":"australia","body":"\n# View automated phishing response playbook flow action designer\n\nYou can drill down to the Action Designer to view detailed information about the actions being performed for a specific step in the automated phishing response playbook flow.\n\nThis page describes the Action Designer page for the Get Observables from Task step. Select a task in the Action Outline panel to view the details.\n\n## Action Input\n\nThis section shows details on how the action was created including the incident id, the type of observable \\(hash or IP\\) and observable finding \\(malicious emails only\\).\n\n\\[Omitted image \"cj-sir-flow-phishing-action5-1.png\"\\] Alt text: Automated phishing playbook flow: action designer inputs\n\n## Get M2M Records\n\nThis section shows the conditions that have been defined to search for observables in a specified table.\n\n\\[Omitted image \"cj-sir-flow-phishing-action5-2.png\"\\] Alt text: Automated phishing playbook flow: action designer get records\n\n## Get Observables\n\nThis section shows the script used to retrieve observables based on the specified filter conditions. Finally, the observables meeting this criteria and the count is displayed.\n\n\\[Omitted image \"cj-sir-flow-phishing-action5-3.png\"\\] Alt text: Automated phishing playbook flow: action designer get observables\n\n**Note:** All actions defined in this flow are reusable and can be modified according to your requirements.\n\n**Parent Topic:**[Run the automated phishing response playbook flow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/run-phishing-playbook.md)\n\n"}}