runbook▌

Designs and documents structured incident response playbooks that define step-by-step procedures for specific incident types aligned with NIST SP 800-61r3 and SANS PICERL frameworks. Covers playbook structure, decision trees, escalation criteria, RACI matrices, and integration with SOAR platforms. Activates for requests involving IR playbook creation, incident response procedure documentation, response runbook development, or SOAR playbook design.

Structured incident response runbooks with detection, triage, mitigation, and communication procedures. \n \n Provides severity-level framework (SEV1–SEV4) with response time targets and impact classifications \n Includes ready-to-use templates for service outages and database incidents with bash/SQL commands, health checks, and rollback procedures \n Covers escalation matrices, communication templates for notifications and status updates, and verification steps to confirm resolution \n Emphasiz

Production-ready templates for incident response runbooks covering detection, triage, mitigation, resolution, and communication.

Create comprehensive operational runbooks that provide step-by-step procedures for common operational tasks, incident response, and system maintenance.

If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md.