Automation Rule and Playbooks

Automation Rule: Set conditions to send Sentinel Incidents to an automation workflow or playbook. Playbook: Execute course of action (require API integrations with connectors). They are more complex and require deep knowledge.