Downloads

Resources

Checklists, templates, and toolkits pulled directly from real engagements and shifts.

PDF

A one-page checklist covering the first ten minutes of triage for any alert type — print it or pin it next to your queue.

Jun 5, 2026Coming soon

Template

The scoping document template we use before every engagement kickoff — asset inventory, auth boundaries, and rules of engagement.

May 24, 2026Coming soon

ZIP Archive

Ten tuned Sigma rules covering common LOLBAS abuse patterns, ready to convert to your SIEM's query language.

May 2, 2026Coming soon

Spreadsheet

A tracked spreadsheet for coordinating containment, eradication, and recovery steps across a live incident.

Apr 18, 2026Coming soon

All resources