IRIS-SOAR is a modular Security Orchestration, Automation, and Response (SOAR) platform implemented in Python. The tool provides automated playbook execution capabilities for security incident response workflows. It integrates with DFIR-IRIS to enhance digital forensics and incident response operations through automation. The platform supports modular architecture allowing for customizable security orchestration workflows. IRIS-SOAR enables security teams to automate repetitive tasks, coordinate response activities, and streamline incident handling processes. The Python-based implementation provides flexibility for custom integrations and workflow development.