Which term facilitates incident response, threat hunting, and security configurations without any human assistance?

Which term facilitates incident response, threat hunting, and security configurations without any human assistance?

• A. Playbook
• B. SOAR
• C. Runbook
• D. Automation

Answer: (B)

In security operations, coordinating actions across multiple tools, automating workflows, and triggering responses without human input is essential. This is what SOAR provides: Security Orchestration, Automation, and Response. It connects various security tools, automates end-to-end workflows, and can execute containment, enrichment, and remediation steps across the environment without requiring manual steps. A runbook is a manual guide for responders; a playbook outlines a workflow and decision points but isn’t by itself a fully automated, cross-tool engine; automation alone focuses on individual tasks without coordinating across tools. SOAR uniquely combines orchestration, automation, and response to support incident response and threat hunting with minimal human intervention.

In security operations, coordinating actions across multiple tools, automating workflows, and triggering responses without human input is essential. This is what SOAR provides: Security Orchestration, Automation, and Response. It connects various security tools, automates end-to-end workflows, and can execute containment, enrichment, and remediation steps across the environment without requiring manual steps. A runbook is a manual guide for responders; a playbook outlines a workflow and decision points but isn’t by itself a fully automated, cross-tool engine; automation alone focuses on individual tasks without coordinating across tools. SOAR uniquely combines orchestration, automation, and response to support incident response and threat hunting with minimal human intervention.