# All Operations Dashboard

The All Operations dashboard page displays a full list of operations cards for all available operations that have been used. It is also where you can can initiate creating, editing, or viewing your operations.

Operations are the core of the Breach and Attack Simulation platform. Each operation can have a number of selected procedures, and based on that selection, you can run these procedures and then view the results. A procedure is a sequence of actions (tactics) performed to execute a simulated threat actor's intended goal.

# Table vs. Dashboard view

Use the following steps to change between a Dashboard and Table view of all of your operations.

1. To change from a dashboard view to a table view, select the Table view icon in the upper right of the page.

   The table view of all your operations displays and the icons toggle to display

   

2. Select the Filter and/or Table column icons to manage how the table displays. See the Search, sort, and filter tables section for further details. And select the Dashboard icon if you want to return to view your operations in dashboard format.

# All Operations cards

Within each operation card, you can see the percentage of coverage for each detection category.

• You can also see how many procedures you have scoped to that operation, as well as whether it is an interactive or scheduled operation.
• The 242/242 in the image above indicates that there are 242 procedures associated with the operation and that 242 have been tested (i.e., they have a detection level set).

# Searching All Operations

Enter an operation name or other search term in the Search field to refine the page's display to conform to your search criteria.

See the section below and the Operations section for further details on working with Operations.

# Creating an Operation

Use the following steps to create an operation.

1. From the All Operations page, select the Add Operation button to display the Create Operation page.

2. Enter a name for your operation in the Operation Name field.

3. Select the operation type, either Interactive or Scheduled, from the drop-down list.

• Interactive Operations are run ad-hoc at the user's discretion. Interactive Operations will not run at any set interval and provide you with the ability to continually run and re-run your Playbooks and Procedures wherever appropriate.
• Scheduled Operations enable you to run Playbooks at consistent intervals. You are able to configure the recurrence of the schedule including "Daily, Monthly, or Yearly" at a specific time.

4. Select the tactics you want included in the Operation.

• Select the expand/hide icon to show all actions within each tactic.
• Select the top-most checkbox to select all actions for that tactic, or expand the tactic list and select individual actions.

5. Select the Save button to save your Operation.

# Editing an Operation

Use the following steps to edit an operation.

1. Select the edit icon to display the Edit Operation page, where you can edit components of the operation.

2. Make edits for any of the following Operation details:

• Change the name of the Operation
• Delete the Operation
• Select or deselect Procedures

3. Select Save to save your changes and return focus to the Workspace page for that Operation.

# Run an Operation

Use the following steps to run an operation.

1. From the All Operations page, select the play button for any Operation to display the Run page, where you can configure and run procedures.

2. See the Run Operation page for more details.

# Operation Workspace

1. Select anywhere in an operation card to display its Workspace page in an expanded view.

2. From here you can review the Overall Coverage Summary and Overall Coverage Summary by Tactic dashboards and the table of tactics for the Operation.

See the Workspace section for full details.