Skip to main content

Cyber Defense TacticsCDT

Services Learn Brief About Contact

Loading

Subscribe to the Cyber Defense & AI Brief

Company

A closed-loop practice for the AI-enabled SOC. Cyber Defense Tactics is a practice of CarbeneAI.

When the findings need an owner at the leadership level, CarbeneAI provides the fractional CTO and CISO seat.

contact@cyberdefensetactics.com
+1 (512) 270-0061
5900 Balcones Dr #29361, Austin, TX 78731

LinkedIn
X
YouTube

Services

Agentic SOC Readiness Sprint
AI Incident Readiness Exercise
AI Security Use-Case Audit
Annual Readiness Program

Library

Reference library
ATT&CK
D3FEND
Use case development
MITRE ATLAS
IR playbooks
The Brief
Brief archive

Site

About
Request a scoping call
Privacy
Terms

© 2026 Cyber Defense Tactics.

A practice of CarbeneAI.

IR playbooks

Threat-Specific

Response procedures for specific attack types like ransomware, BEC, and insider threats

All playbooks

Phishing Response BasicsA beginner-friendly guide to handling phishing reports, including email analysis, user communication, and basic remediation steps.beginner · 30-60 min
Malware Triage FundamentalsStep-by-step guide for initial malware response, including isolation, basic analysis, and evidence collection.beginner · 1-2 hours
Ransomware Response PlaybookComplete guide for responding to ransomware incidents including containment, negotiation considerations, and recovery strategies.advanced · Multiple days
Business Email Compromise (BEC) ResponseGuide for handling BEC incidents from detection through financial recovery attempts and legal engagement.advanced · 2-4 hours initial, ongoing
Insider Threat InvestigationSensitive investigation framework for handling suspected malicious or negligent insider activity.advanced · Days to weeks
Data Exfiltration InvestigationFramework for investigating data loss incidents and determining regulatory notification requirements.advanced · Days to weeks
Cryptominer Detection and ResponseGuide for identifying cryptomining activity and removing mining malware from affected systems.intermediate · 1-3 hours