A playbook is a set of tasks or workflow(s), which may or may not be automated, associated with a specific threat type. It determines the organizational response to a type of threat and guides analysts through the investigation and remediation process, therefore improving consistency and reducing time to respond. IBM Security QRadar SOAR playbooks are unique as they are dynamic and additive, which means that they evolve with an incident as new information is uncovered. Read the white paper on playbook-driven cybersecurity. \r