@stauff there are a few ways to stop this, my main preference is only adding artifacts via methods where you can stipulate run_automation = False. The 3 ways this is possible at the moment are: REST Call to add artifact and set run_automation to False Artifact REST Docs  Use the Phantom Phantom app's add_artifact call and untick the run_automation option Use the extract_ioc action in the Parser app and untick the run_automation  The issue is that if you add manually to a container then it will NOT provide this option so in this case it would be best to add a tag to the event to state it's been "processed" already and then have a decision at the beginning that looks for that tag and ends if it exists. This can get messy in the activity pane if you are adding a lot manually but will work.  Personally I would recommend controlling the addition of artifacts by a playbook, maybe with a prompt for artifact info and then use REST or the add_artifact to add the data with the run_automation set to False.  Hope this helped? If so please upvote. ... View more