Back
INSTANT D0WNL04D
BLU3 T34M RUNB00K — Detection & Response
Copy-paste detection rules, IR runbooks and hardening baselines.
Format: PDF + Sigma rules + templates · Length: 200 pages
KSh 4,800
Overview
A working runbook rather than theory: Sigma rules, Windows and Linux audit baselines, phishing triage flow, ransomware containment sequence, and a 48-hour incident timeline template. Sized for small teams with no SOC.
How to use
Import the Sigma rules into your SIEM, apply the baselines in a staging group first, and print the containment sequence for the wall.