IR playbooks
Technical Procedures
Detailed technical workflows for forensics, log analysis, and IOC collection
- Memory Forensics BasicsIntroduction to memory forensics for incident responders, covering acquisition and basic analysis.intermediate · 2-4 hours
- Network Traffic Analysis for Incident ResponseGuide for using network traffic analysis to support incident investigation and threat hunting.intermediate · 2-4 hours
- Log Analysis WorkflowFramework for effective log analysis to support incident response and threat hunting activities.intermediate · 1-4 hours
- IOC Collection GuideBest practices for IOC collection, formatting, and sharing during and after incident response.beginner · Ongoing
- Endpoint Forensics CollectionGuide for collecting forensic artifacts from endpoints while maintaining evidence integrity.intermediate · 2-4 hours per system