In the architecture of SOAR platforms there are two different approaches, which we call form-based and playbook-based. As SOAR technology has evolved, most vendors have adopted the playbook-based model, but a few are still form-based. Because of some significant limitations to the form-based approach, we built D3 to be primarily playbook-based, but we can replicate the strengths of the form-based approach when our clients require it. In this paper, we’ll explain what we mean by these terms, the strengths and weaknesses of each, and the approach that D3 takes to SOAR workflows.