User Activity

i need to create playbook if security incident response record created  based on condition like have category is policy violation   i need to store in worknotes like kb article with the help of playbook , 
Helpfuls from
Helpfuls given to