Automation Rule and Playbooks

Automation rules cover a few keys actions (6 in total) and are free https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/what-s-new-automation-rules/ba-p/2216926#:~:text=Automation%20rules%20are%20comprised%20of%20several%20parts%3A%201,playbook%20Changing%20the%20status%20of%20an%20incident%20 . Playbooks have something like 400+ connectors so can cover a simple solution to the very complex - but there is more complexity in using them and a minimal cost.

Automation Rule: Set conditions to send Sentinel Incidents to an automation workflow or playbook. Playbook: Execute course of action (require API integrations with connectors). They are more complex and require deep knowledge.