Incident-Playbook icon indicating copy to clipboard operation
Incident-Playbook copied to clipboard

Published 20 hours ago • verified publisher icon austinsonger
→

Metadata

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

Results 101 Incident-Playbook issues
Sort by recently updated
recently updated
newest added

[New-Playbook] T1048.001 - Exfiltration Over Symmetric Encrypted Non-C2 Protocol

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Exfiltration/T1048%20-%20Exfiltration%20Over%20Alternative%20Protocol/T1048.001%20-%20Exfiltration%20Over%20Symmetric%20Encrypted%20Non-C2%20Protocol.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Exfiltration
Priority:HIGH

[New-Playbook] T1048 - Exfiltration Over Alternative Protocol

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Exfiltration/T1048%20-%20Exfiltration%20Over%20Alternative%20Protocol/T1048%20-%20Exfiltration%20Over%20Alternative%20Protocol.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Exfiltration
Priority:HIGH

[New-Playbook] T1030 - Data Transfer Size Limits

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Exfiltration/T1030%20-%20Data%20Transfer%20Size%20Limits.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Exfiltration
Priority:HIGH

[New-Playbook] T1020.001 - Traffic Duplication

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Exfiltration/T1020%20-%20Automated%20Exfiltration/T1020.001%20-%20Traffic%20Duplication.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Exfiltration
Priority:HIGH

[New-Playbook] T1020 - Automated Exfiltration

- https://github.com/austinsonger/Incident-Playbook/blob/main/Playbooks/MITRE-ATTACK/Exfiltration/T1020%20-%20Automated%20Exfiltration/T1020%20-%20Automated%20Exfiltration.md ### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Exfiltration
Priority:HIGH

[New-Playbook] T1529 - System Shutdown/Reboot

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Impact
Priority:HIGH

[New-Playbook] T1489 - Service Stop

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Impact
Priority:HIGH

[New-Playbook] T1498.002 - Reflection Amplification

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Impact
Priority:HIGH

[New-Playbook] T1498.001 - Direct Network Flood

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Impact
Priority:HIGH

[New-Playbook] T1498 - Network Denial of Service

### Checklist - [ ] Investigate - [ ] Remediate - [ ] Communicate - [ ] Recover

austinsonger avatar austinsonger

Help Wanted
New-Playbook
Impact
Priority:HIGH

← Metadata

1.4k
Stars
228
Forks
70
Watchers

Owner

verified publisher icon austinsonger

Metadata

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

Back