Playbook automation collects data from different security and logging tools and makes decisions on behalf of the incident responder.