3 A.M. Incident Runbook
Turn the closest incident match into a timed PICERL checklist with explicit ownership, paging rules, and ready-to-fill messages.
Declare and Classify
Uses bundled sample runbook data and fill-in message fixtures; it runs entirely offline. The full product includes five attack playbooks, severity and on-call guides, evidence/PIR templates, CSV logs, and tabletop scenarios.
Included with Incident Response Playbook
The complete Incident Response Playbook package includes:
- You are here
- The operating model
- SEV-1..4 matrix + decision flow + worked examples
- On-call model, escalation ladder, paging rules
- How to practice
- Default SEV-1