- Playbook Battle Cards (PBC) are recipes for preparing and applying countermeasures against cyber threats and attacks
- PBC are a prescriptive approach to combat various TTP deployed by cyber threat actors
- PBC follow a PICERL model
- PBC aid the kinetic activities conducted by humans prior to, during, and after cybersecurity incident response
- PBC are inspired by https://github.com/certsocietegenerale/IRM/
- https://github.com/guardsight/gsvsoc_cybersecurity-incident-response-plan
- https://github.com/certsocietegenerale/IRM/
- https://www.incidentresponse.com/playbooks/
- https://www.nist.gov/cyberframework
- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-184.pdf
- https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final
- https://www.mitre.org/sites/default/files/publications/pr_14-3929-cyber-exercise-playbook.pdf