Playbook-based security investigations using a card system framework