Glossary: Security Operations and Incident Response

Playbook

Also written: playbooks

A step-by-step guide for one kind of incident, with its trigger, steps, decision points, roles, evidence to keep and who to tell. In a SOAR platform, stored workflows are also called playbooks.