Playbook
- •
def
- •
a documented, step-by-step set of conditional processes and procedures for handling a specific type of incident (e.g., investigating a data breach, recovering from ransomware)
- •
- •
how it's used
- •
can be followed manually as a checklist, or used to drive automated activities — often integrated with a Security Orchestration, Automation, and Response (SOAR) platform
- •
- •
related