World-class outbreaks accelerate digital transformation, with enterprise security architecture extending from data centers to the cloud, endpoints extending from PCs, notebooks to mobile devices and IoT devices, and connecting from within the enterprise to every corner of the Internet; As a result, the network attack landscape has also followed the transformation, using the enterprise digital transformation after the spread of security gaps to attack, enterprise SOC analyst configuration, has been difficult to keep up with the pace of threat evolution and a large number of attacks, so the security market has appeared SOAR (Security Orchestration, Automation and Response) to help enterprises optimize their incident analysis and response threats, scripted security incident analysis SOP, standardized and automated processes for emotional intelligence collection and response actions, place analyst manpower on high-value analytical operations to reduce the response time to each incident and achieve the level of security control required by the enterprise.