Incident response playbooks for common attack scenarios — aligned to NIST and MITRE ATT&CK
-
Updated
May 11, 2026
#
soc-playbook
Here are 2 public repositories matching this topic...
Network threat detection lab — Encrypted Client Hello, post-quantum TLS, JA4 fingerprinting, DNS tunneling, C2 beaconing, AI/MCP egress. Sigma rules, SOC playbooks, and CI-validated detection-as-code.
network-forensics incident-response wireshark post-quantum-cryptography tshark zeek dns-tunneling blue-team mitre-attack ai-security threat-detection detection-engineering sigma-rules soc-analyst detection-as-code encrypted-client-hello cybersecurity-portfolio ja4 c2-detection soc-playbook
-
Updated
Jul 29, 2026 - Shell
Improve this page
Add a description, image, and links to the soc-playbook topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the soc-playbook topic, visit your repo's landing page and select "manage topics."