Which term facilitates incident response, threat hunting, and security configurations without any human assistance?

• A. Playbook
• B. SOAR
• C. Runbook
• D. Automation

Answer: (B)

In security operations, coordinating actions across multiple tools, automating workflows, and triggering responses without human input is essential. This is what SOAR provides: Security Orchestration, Automation, and Response. It connects various security tools, automates end-to-end workflows, and can execute containment, enrichment, and remediation steps across the environment without requiring manual steps. A runbook is a manual guide for responders; a playbook outlines a workflow and decision points but isn’t by itself a fully automated, cross-tool engine; automation alone focuses on individual tasks without coordinating across tools. SOAR uniquely combines orchestration, automation, and response to support incident response and threat hunting with minimal human intervention.