Resources

Free playbooks, checklists, and reference guides for security teams.

🔒

Ransomware Incident Response Playbook

A complete phase-by-phase response playbook for ransomware incidents — from detection and containment through recovery and post-incident review.

Open Resource

🎣

Phishing Incident Response Playbook

Step-by-step response for phishing reports — triage, containment, investigation, and recovery including credential compromise handling.

Open Resource

⚠️

Data Breach Incident Response Playbook

Structured response for confirmed or suspected data breaches, including legal and regulatory notification guidance for GDPR, HIPAA, and CCPA.

Open Resource

Endpoint Analysis & Incident Handling Procedures for IOC IP Connection Detection

This playbook provides operational guidance for detecting, triaging, investigating, containing, and remediating endpoint communications involving known malicious or suspicious IP addresses (Indicators of Compromise — IOC IPs).

Open Resource