Sentinel should assign incidents and invoke supported workflows when defined conditions match. Which capability fits?

1. A table partition key
2. Automation rules with appropriate actions and playbook integration
3. A DNS alias
4. A workbook title