Thank you for your interest in improving this incident response planning resource. Contributions from incident responders, SOC analysts, CISOs, and IT security professionals are welcome.
- Open an issue if you find inaccuracies in the templates
- Report outdated references to frameworks or regulations
- Suggest additional incident categories or response procedures
- Fork the repository
- Create a feature branch (
git checkout -b improve-template) - Make your changes
- Ensure all markdown renders correctly
- Submit a pull request with a clear description of your changes
- Additional incident type playbooks (insider threat, supply chain, etc.)
- Real-world lessons learned (anonymized)
- Integration guidance for common SIEM/SOAR platforms
- Updates reflecting current threat landscape
- Templates adapted for specific industries or company sizes
- Keep language clear and actionable under pressure
- Reference NIST SP 800-61, SANS, or other established frameworks
- Do not include proprietary tools or vendor-specific guidance
- Do not include real IP addresses, hostnames, or identifying information
- All contributions will be licensed under CC-BY-SA-4.0
Be respectful and professional. These resources help organizations respond effectively to security incidents and protect their communities.
For questions about incident response planning and cybersecurity services, visit Petronella Technology Group or open a discussion in this repository.