Why Sublime Black Failed: Automating Cybersecurity Incident Response