Incident response playbooks for common attack scenarios — aligned to NIST and MITRE ATT&CK
-
Updated
May 11, 2026
Incident response playbooks for common attack scenarios — aligned to NIST and MITRE ATT&CK
Network threat detection and traffic analysis using Wireshark — DNS tunneling detection, TLS fingerprinting with JA4, C2 beacon identification, and automated analysis with TShark
Add a description, image, and links to the soc-playbook topic page so that developers can more easily learn about it.
To associate your repository with the soc-playbook topic, visit your repo's landing page and select "manage topics."