Introduction

Stories are a collection of interconnected agents working towards a singular mission. They can be viewed as analogous to use-cases or playbooks. For example, you might have a Phishing story, an Infected endpoint story or a DDoS story. To support sharing, Stories can be imported and exported.

Adding Agents to Stories

When editing or creating an agent, it can be added to a story. Additionally, agents can be added and removed from stories when editing the story. Agents can be in only one story at a time and they can only receive from and emit to agents in the same story.

Default Stories

When Tines tenants are created they contain 3 stories:

  • The Simple story: A short story that demonstrates how agents and events interact to automate workflows.
  • VPN Threat Detection & Response: This story demonstrates how automated threat detection and response can be performed on corporate VPN connections.
  • <tenant-name> Story: This story, which shares a name with the tenant, is known as the catch-all story. When a story is deleted, but the related Agents are not, they will be moved here.