logo
Defence blues
Playbook development examples
  • Red tradecraft
  • Privacy greenhouse
  • Purple crossroads
  • Indigo observatory
  • Contact
Initializing search
    • Blue team @Purpleteaming
    • Blue team @SOC
      • Network traffic analysis (NTA)
      • Digital forensics and incident response (DFIR)
        • Jottings on DFIR techniques
        • Playbook development examples
          • Ransomware response playbook (NGO, 20 staff)
          • Phishing campaign response playbook (SME, 50-250 staff)
          • Compromised AWS credentials playbook (development environment)
        • Playbook development examples
          • Ransomware response playbook (NGO, 20 staff)
          • Phishing campaign response playbook (SME, 50-250 staff)
          • Compromised AWS credentials playbook (development environment)
        • TryHackMe rooms
        • Puzzles @Cyberdefenders
        • Root-me forensics challenges
        • DFRWS Forensic challenges @dfrws
        • HN/P challenges @honeynet
        • Malware traffic analysis exercises @malware-traffic-analysis
        • Geoguessr (Geolocation game) @geoguessr
      • Endpoint detection and response (EDR)
      • Security information and event management (SIEM)
    • Blue team for dev
    • Blue team @Home
    • Bulletproofing servers
    • Golem Trust Computing Ltd.
    • Department of Silent Stability
    • The Home for Bewildered Beasts of Legend
    • Stormforge training grounds
    • Honeytech for humans

    Playbook development examples¶

    A stick figure is writing on a giant scroll labeled 'Incident Playbook'. Another stick figure is erasing a step and writing a better one. A third stick figure is adding a 'Post-Mortem Lesson' sticky note to the margin. The playbook is shown as a messy, evolving document, not a pristine book.

    Turn lessons from exercises and incidents into playbooks.

    • Ransomware response playbook (NGO, 20 staff)
    • Phishing campaign response playbook (SME, 50-250 staff)
    • Compromised AWS credentials playbook (development environment)
    See something you like? Let’s create your custom playbook.
    2026-04-01 20:54
    © Copyright 2025, TyMyrddin.
    Created using Sphinx 7.2.6. and Sphinx-Immaterial

    Made with love in the Unseen University, 2025, with a forest garden fostered by /ut7