{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44950,"path":"security-management/security-incident-response/sir-new-ui-add-playbook.md","title":"Enable playbooks for analyst selection","bundle":null,"doc_type":null,"release":"australia","body":"\n# Enable playbooks for analyst selection\n\nAdd new playbooks to the playbook selection list.\n\nYou can select an appropriate playbook to investigate security incidents in the Security Analyst Workspace \\([Manage security threats using the Security Analyst Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/sir-new-ui.md)\\). The playbook selection option supports only the playbooks which are designed using Flow Designer.\n\nAfter you have created a playbook using Flow Designer, follow these steps to include it in the Selected Playbook choice list:\n\n1.  Navigate to `sys_hub_flow` table.\n2.  Search for the new playbook you have created using Flow Designer.\n3.  Add the **sir\\_playbook** tag to the playbooks that you want to include in the Selected Playbook choice list.\n\n**Note:** If you have old playbooks that have not been migrated from workflows to Flow Designer, they will not appear in the list. But, if a playbook created using workflows is assigned to a security incident either by a trigger condition or by manual selection \\(using **Run Orchestration** option in the classic environment\\), this playbook is launched when you open the security incident in the Security Analyst Workspace.\n\n"}}