demisto/swimlane type setup. i know there are a lot of kolide users here, but I'm interested to know what folks are using as the response pipeline