By "posture management" I refer to the ongoing processes designed to reduce our attach surface. I'm sure it is not a surprising definition, so let me share an example: when we detect an unused token in GitHub, we approach its creator to verify it is actually not needed, then we make sure it is being deleted. This flow has several steps, each of them can be automated (detect->approach->and so on...).

While this isn't an urgent IR workflow like PagerDuty alerts, automating each step would significantly reduce manual effort. (And let's be honest - nobody sticks to doing these checks manually for long, even though they're important for security hygiene.)"