continued draft

Author: batamig

articles/sentinel/TOC.yml

@@ -242,10 +242,10 @@
       href: authenticate-playbooks-to-sentinel.md
     - name: Use triggers and actions in playbooks
       href: playbook-triggers-actions.md
-    - name: Use a watchlist and playbook to inform about alerts
-      href: watchlists-playbooks-alerts.md
     - name: Customize playbooks from templates
       href: use-playbook-templates.md
+    - name: Automate activity with both watchlists and playbooks
+      href: automate-playbook-watchlists.md
   - name: Manage Microsoft Sentinel
     items:
     - name: Microsoft Sentinel for MSSPs

articles/sentinel/automate-playbook-watchlist.md

@@ -1,5 +1,5 @@
 ---
-title: Use a Microsoft Sentinel watchlist and playbook to inform owners of alerts
+title: Use a Microsoft Sentinel watchlist and playbook together to automate activity
 description: Learn how to create a Microsoft Sentinel watchlist and playbook based on a Microsoft Defender for Cloud incident creation rule to inform resource owners of security alerts.
 author: batamig
 ms.author: bagol
@@ -9,8 +9,11 @@ ms.date: 09/20/2021
 
 # Use Microsoft Sentinel watchlists and playbooks together to automate activity
 
-This article describes two, common situations where using watchlists and playbooks together are helpful in automating activity in your systems: informing resource owners about alerts and responding to incidents with deny and allow lists.
+This article describes two common situations where using watchlists and playbooks together are helpful in automating activity in your systems: informing resource owners about alerts and responding to incidents with allow lists. 
 
+> [!TIP]
+> Use these sample playbooks as examples or templates for how you can create automation in your own system, modifying the values as needed.
+> 
 ## Automatically inform owners of alerts
 
 [Microsoft Defender for Cloud alerts](/azure/defender-for-cloud/defender-for-cloud-introduction) inform the Security Operations Center (SOC) about possible security attacks on Azure resources.