Incident-Playbook icon indicating copy to clipboard operation
Incident-Playbook copied to clipboard

Published 20 hours ago • verified publisher icon austinsonger
→

Metadata

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

Results 101 Incident-Playbook issues
Sort by recently updated
recently updated
newest added

[New-Playbook] T1134.005 - SID-History Injection

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Privilege Escalation
Priority:MEDIUM

[New-Playbook] T1134.004 - Parent PID Spoofing

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Privilege Escalation
Priority:MEDIUM

[New-Playbook] T1134.003 - Make and Impersonate Token

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Privilege Escalation
Priority:MEDIUM

[New-Playbook] T1134.002 - Create Process with Token

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Privilege Escalation
Priority:MEDIUM

[New-Playbook] T1134.001 - Token Impersonation/Theft

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Privilege Escalation
Priority:MEDIUM

[New-Playbook] T1548.004 Elevated Execution with Prompt

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Privilege%20Escalation/T1548-Abuse-Elevation-Control-Mechanism/T1548.004-Elevated-Execution-with-Prompt.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Privilege Escalation
Priority:MEDIUM

[New-Playbook] T1548.003 Sudo and Sudo Caching

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Privilege%20Escalation/T1548-Abuse-Elevation-Control-Mechanism/T1548.003-Sudo-and-Sudo-Caching.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Privilege Escalation
Priority:MEDIUM

[New-Playbook] T1548.001 Setuid and Setgid

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Privilege%20Escalation/T1548-Abuse-Elevation-Control-Mechanism/T1548.001-Setuid-and-Setgid.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Privilege Escalation
Priority:MEDIUM

[New-Playbook] T1548.002 Bypass User Account Control

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Privilege%20Escalation/T1548-Abuse-Elevation-Control-Mechanism/T1548.002-Bypass-User-Account-Control.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Privilege Escalation
Priority:MEDIUM

[New-Playbook] T1537 - Transfer Data to Cloud Account

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Exfiltration/T1537%20-%20Transfer%20Data%20to%20Cloud%20Account.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Exfiltration
Priority:HIGH

← Metadata

1.4k
Stars
228
Forks
70
Watchers

Owner

verified publisher icon austinsonger

Metadata

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

Back