Book 11 of 14
Incident Response
Structured response from triage to containment, eradication, recovery, and program maturity
33
Chapters
7
Parts
9
Playbooks
PICERL
Framework
Part 1 — IR Fundamentals
Part 2 — Containment
Part 3 — Eradication
Part 4 — Recovery
Part 5 — IR Playbooks
- Ch 16Ransomware Response Playbook
- Ch 17Business Email Compromise Playbook
- Ch 18Active Adversary Playbook
- Ch 19Cloud Incident Response Playbook
- Ch 20Insider Threat Playbook
- Ch 21Web Shell Response Playbook
- Ch 22Supply Chain Compromise Playbook
- Ch 23Phishing Response Playbook
- Ch 24Data Exfiltration Response Playbook
Part 6 — Communication, Legal & Documentation
Part 7 — IR Automation and Program Management