Description
Related:
Ongoing work to explore adding "playbook actions" to rule/alert investigation guides, similar to running Osquery from investigation guides (added in 8.5 - docs PR #2561).
Unclear what functionality, if any, will make it into 8.6.0 release, but we're creating this issue to monitor the feature as it's being finalized.