Automation Rule and Playbooks

[Dhinesh2255]

Hey,

What is key difference between Automation Rule and Playbooks

[#2]

Automation rules cover a few keys actions (6 in total) and are free https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/what-s-new-automation-rules/ba-p/2216... . Playbooks have something like 400+ connectors so can cover a simple solution to the very complex - but there is more complexity in using them and a minimal cost.

[#3]

Automation Rule: Set conditions to send Sentinel Incidents to an automation workflow or playbook. Playbook: Execute course of action (require API integrations with connectors). They are more complex and require deep knowledge.