5 个仓库
Standardized procedures and automated workflows for managing security incidents.
Explore 5 awesome GitHub repositories matching part of an awesome list · Incident Response Playbooks. Refine with filters or upvote what's useful.
ThreatHunter-Playbook 是一个威胁狩猎剧本框架和检测工程工作流,旨在标准化安全检测生命周期。它作为一个社区驱动的对手战术和检测逻辑仓库,使用交互式笔记本将技术文档与可执行分析相结合。 该项目提供了一个验证套件,用于针对预先录制的遥测数据集测试安全假设。这确保了检测逻辑在部署到生产环境之前,能在本地或云环境中得到验证。 该框架涵盖安全检测工程、威胁狩猎标准化以及狩猎规划的正式化。它利用结构化模板和基于组件的建模,引导从初始假设到最终验证的过程。
Structured playbooks for developing and executing threat hunting campaigns.
Incident Response Methodologies 2022
Methodologies and frameworks for effective incident response management.
These playbooks are provided as templates for organizations building incident response capability on AWS. They should be customized to suit your specific needs, risks, available tools, and work processes. These guides are not official AWS documentation and are provided as-is.
Customizable runbooks for handling security incidents in AWS environments.
A concise, directive, specific, flexible, and free incident response plan template
Templates for building structured incident response plans.
Phantom Community Playbooks
Community-contributed automation playbooks for security orchestration platforms.