With Splunk buying Phantom, it seems like Microsoft wants to get into the playbooks and security orchestration.