Automated playbooks are the process of creating workflows with machine-understandable codification to enable automation of the procedures. After the code is created, orchestration services execute workflows by interfacing with the other orchestration services and humans as necessary.

This goal of this is to maximize the efficiency of the SOC and better response times by allowing known threats to be remediated without much human intervention.