See also Incident Response

Mapped to Mitre ATT&CK

https://github.com/austinsonger/Incident-Playbook

https://github.com/guardsight/gsvsoc_cirt-playbook-battle-cards

Playbooks for different incident types

https://www.incidentresponse.com/playbooks/

Useful library of playbooks.

https://gitlab.com/syntax-ir/playbooks

The CACOA Project aims to standardise playbooks

https://docs.oasis-open.org/cacao/security-playbooks/v1.0/security-playbooks-v1.0.html

CISA's playbook

https://www.cisa.gov/sites/default/files/publications/Federal_Government_Cybersecurity_Incident_and_Vulnerability_Response_Playbooks_508C.pdf

Awesome DFIR's playbooks

https://awesomedfir.com/playbooks

FRSecure's playbooks

https://frsecure.com/blog/incident-response-playbooks/

Guardsight's playbooks

https://github.com/guardsight/gsvsoc_cirt-playbook-battle-cards

Microsoft's Approach to Ransomware

https://docs.microsoft.com/en-us/security/compass/human-operated-ransomware