Red Hat Blog: Getting started with Ansible security automation: Incident Response

We’re using a simplified approach in our demonstration by utilizing the hostvars['attacker']['private_ip2'] Ansible fact, which in our lab translates to 172.17.199.94, gathered from our attacker lab machine. However, Ansible Automation Platform offers extensive features and capabilities to accomplish this in large-scale production scenarios.