DOCSEARCHbyAlgolia
Submit Docs

gsvsoc_cirt-playbook-battle-cards

repository·master·Indexed 19 days ago

https://github.com/guardsight/gsvsoc_cirt-playbook-battle-cards

A collection of Cyber Incident Response Playbook Battle Cards (PBC) providing prescriptive recipes for countermeasures against specific cyber threats and TTPs. These cards follow the PICERL (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned) incident response model and are inspired by the CERT Société Générale Incident Response Methodology (IRM).

Tokens
186
Snippets
0
Records
1
Agent score
16%

What's inside gsvsoc_cirt-playbook-battle-cards

  1. Overview of Playbook Battle Cards (PBC)

    master

    Playbook Battle Cards (PBC) are prescriptive recipes designed to help responders prepare and apply countermeasures against specific cyber threats and attacks. They are structured to combat various Tactics, Techniques, and Procedures (TTPs) used by threat actors.

    Key characteristics of PBC include:

    • Model Alignment: They follow the PICERL (Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned) incident response model.
    • Operational Support: They support the kinetic activities performed by human responders throughout the lifecycle of a cybersecurity incident (before, during, and after).
    • Inspiration: The approach is inspired by the CERT Société Générale Incident Response Methodology (IRM).