How to create test cases to validate SOAR playbooks?

[ibr1]

I created a bunch of SOAR playbooks to detect auth issues? But SecOps says "There are no available test cases."  How do you validate the test cases in this scenario?

[ylandovskyy]

Hey @ibr1 ,

Test cases can be created from existing Alerts. Here is how you would do it:

Note: you will need to refresh the playbook page after test case will be created for it to be available in the simulation mode.