How do you automate things in IR?

Hi all,

I work in IR, been doing it for the last 5.5 years.

Was curious and wanted to hear how you automated things within your current environment.

What was the reasoning behind it, did you see improvements in incident resolution, efficiency, etc.

Any input is appreciated.

Thanks!

automated current cybersecurity doing efficiency environment etc incident input reasoning resolution things work