Configurable playbooks in an IT and security operations application

A computing device comprising:

• a processor;
• and
• a non-transitory computer-readable medium having stored thereon instructions configured for execution by the processor, which cause the processor to perform operations including:
• causing, by an information technology (IT) and security operations application, display of an automation playbook including a capability block, wherein the automation playbook defines a collection of actions to be performed based on an event provided as input to the automation playbook, and wherein the capability block defines a generic action to be performed and is not associated with any specific application, computing asset, or environment-dependent configuration prior to distribution of the automation playbook, when the automation playbook is configured or executed in a user's environment;
• receiving input selecting an input playbook associated with a first app to assign to the capability block, wherein the input playbook accepts as input one or more input parameters and, upon execution, generates one or more output parameters;
• and
• executing the automation playbook, wherein executing the automation playbook includes, upon reaching the capability block, invoking execution of the input playbook;
• wherein the automation playbook includes a second capability block that is assigned a second input playbook associated with a second app.

A non-transitory, computer-readable medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processors to perform operations including:

• causing, by an information technology (IT) and security operations application, display of an automation playbook including a capability block, wherein the automation playbook defines a collection of actions to be performed based on an event provided as input to the automation playbook, and wherein the capability block defines a generic action to be performed and is not associated with any specific application, computing asset, or environment-dependent configuration prior to distribution of the automation playbook, when the automation playbook is configured or executed in a user's environment;
• receiving input selecting an input playbook associated with a first app to assign to the capability block, wherein the input playbook accepts as input one or more input parameters and, upon execution, generates one or more output parameters;
• and
• executing the automation playbook, wherein executing the automation playbook includes, upon reaching the capability block, invoking execution of the input playbook;
• wherein the automation playbook includes a second capability block that is assigned a second input playbook associated with a second app.