Security orchestration, automation and response / SOAR stories