https://security-storm.com/playbook daily 1.0 2019-07-08 https://security-storm.com/playbook/2019/7/7/aws monthly 0.5 2019-07-08 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1562539274834-JIKENUPCHDWATC8M9F1V/networkRecon_code.jpg Playbook - Detecting Recon and Scanning Activity in AWS: A Crash Course https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1562545892470-TYUQZE62KVXUM7QNHDDC/userRecon_pic.PNG Playbook - Detecting Recon and Scanning Activity in AWS: A Crash Course https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1562551308656-NQCRCLY1JJTN8DE0FMD3/high+connect+results.png Playbook - Detecting Recon and Scanning Activity in AWS: A Crash Course https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1562547590178-L5KX2VJGRTC73SB8J1N5/high+connect.png Playbook - Detecting Recon and Scanning Activity in AWS: A Crash Course https://security-storm.com/playbook/2019/5/3/automating-firedrill-adsim-configuration-with-infernoauger monthly 0.5 2019-05-03 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913322488-1SCUMAVDYSJDN6W9BBF4/Capture3.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913513998-1LF2WKR461Q68SZFTHXO/Capture5.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913672660-EOHMOL5UBU5S1IU0HJIN/Capture8.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913119558-F3CNA9GIHLZ15GUMM0G5/Capture1.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger Screenshot of the FireDrill API Portal https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913811259-D14X0RQHA1NQILL00IWA/Capture11.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913450718-9VU8SCUM9BBA3PDE3CDZ/Capture4.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913725200-7U5NRH1S8CWBM5RG9IWX/Capture9.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913890869-67U0NAYIHYWAIPTSBET0/Capture13.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913776041-SFRHXQNESBBE68O5Y4WJ/Capture10.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913247940-1UCBZKFAJEB5SYGRQCCZ/Capture2.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913613035-NZV7Y8RFVAF69JJOEEDQ/Capture7.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913558595-D2STXGWY9R286STUTVCO/Capture6.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1556913854078-8JSV69QYNA13O92ERVZ7/Capture12.png Playbook - Automating FireDrill AdSim Configuration with InfernoAuger https://security-storm.com/playbook/2018/11/9/risk-gifts-an-early-present monthly 0.5 2018-12-18 https://security-storm.com/playbook/2018/4/5/searching-the-searches monthly 0.5 2018-04-06 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1522984729800-JY3VHY8EGX6OL945ZYU7/search_searches1.PNG Playbook - Searching the Searches Search Term Search Results https://security-storm.com/playbook/2018/3/5/detecting-rdp-brute-force-with-one-hand monthly 0.5 2018-03-05 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1520258691419-9X0DOPJXK1W9SKVQ5MY2/suspect_rdp_attack.PNG Playbook - Detecting RDP Brute Force with One Hand https://security-storm.com/playbook/2017/10/2/potential-malicious-user-agents monthly 0.5 2017-10-03 https://security-storm.com/playbook/2017/9/25/curing-alert-fatigue-through-suppression-and-fidelity monthly 0.5 2017-09-26 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506372723332-VYIPOXBU6PUN9G92W7YD/Auto-Populated.PNG Playbook - Curing Alert Fatigue Through Suppression and Fidelity https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506371965912-G6WGT4BP6SOE8VXXNO23/image-asset.png Playbook - Curing Alert Fatigue Through Suppression and Fidelity https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506371637189-93FQ7ZRMLXK880RS3G5B/image-asset.png Playbook - Curing Alert Fatigue Through Suppression and Fidelity https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506371547766-ZVYE2T98KM6VN48YRDFB/Whitelist_Dashboard.PNG Playbook - Curing Alert Fatigue Through Suppression and Fidelity https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506371572647-1H7DEMJT3NDPAGLNRLP6/Workflow_Action.PNG Playbook - Curing Alert Fatigue Through Suppression and Fidelity https://security-storm.com/playbook/2017/9/23/ivbs56hotnxa2ewygoltxhran240xf monthly 0.5 2017-09-23 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506198908442-NGSQXSMKYR0UMDAC22CQ/firedrill-scenarios.PNG Playbook - KNOWING YOUR BATTLE SPACE - PART 3 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506198851586-9DK68XZZWNETRRK2LYLY/df-tactic-scenario.png Playbook - KNOWING YOUR BATTLE SPACE - PART 3 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506198942508-Q1IRIKN9M2PEZVVMVKTE/firedrill-tests.PNG Playbook - KNOWING YOUR BATTLE SPACE - PART 3 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506198450378-0BU6J278VVX5DK7GP9VV/falcon_v2_wide-whitebg.png Playbook - KNOWING YOUR BATTLE SPACE - PART 3 https://security-storm.com/playbook/2017/9/23/knowing-your-battle-space-part-5 monthly 0.5 2017-09-23 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506197779762-AKWKHNXX8R0ZP2ID50FJ/Tomorrow+Modeling.png Playbook - Knowing Your Battle Space - Part 5 DarkFalcon Tomorrow Model Concept https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506197120794-EYQGTFANSB1J4LS364JT/df-poc-menu.PNG Playbook - Knowing Your Battle Space - Part 5 DarkFalcon Proof of Concept Modeling Menu https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506197205923-TSO3HC8JL38NQ1XZE9HH/df-poc-reset.PNG Playbook - Knowing Your Battle Space - Part 5 DarkFalcon POC Reset https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506197893356-1U6IS3R7Q5YXM3WYMYB7/df-tomorrow-model.PNG Playbook - Knowing Your Battle Space - Part 5 DarkFalcon Tomorrow Model in Splunk https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506197858390-6LSQW0FPQ2XGXU2PVZTB/df-tomorrow-menu.PNG Playbook - Knowing Your Battle Space - Part 5 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1506197300689-E2ME2WZQXKDRLH0V4H9H/df-poc-posture.PNG Playbook - Knowing Your Battle Space - Part 5 DarkFalcon POC Security Posture https://security-storm.com/playbook/2017/9/21/knowing-your-battle-space-part-4 monthly 0.5 2017-09-21 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1505908717398-2TUHD83ULZVTVKXZDNI6/df_attack_entry.PNG Playbook - Knowing Your Battle Space - Part 4 DarkFalcon Attack Profile Entry https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504638467088-0LWTQT5OEHK35ZPZ71M1/falcon_v2_wide-whitebg.png Playbook - Knowing Your Battle Space - Part 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1505908799564-IGV1XZR7DC1Q2FRLOOAJ/df_attack_profile.PNG Playbook - Knowing Your Battle Space - Part 4 DarkFalcon Profiled Attack Detail https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1505908033520-23LNYNZ3LMTY3DCPN2XG/df_threat_external.PNG Playbook - Knowing Your Battle Space - Part 4 DarkFalcon External Attack Path, click to see the entire image https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1505908393706-2Q3A7FUSGEXB1C7584HV/df_threat_internal.PNG Playbook - Knowing Your Battle Space - Part 4 DarkFalcon Internal Attack Path, click to view entire image https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1505907870635-SKYGWY3V5F4P3YH92P07/1475685085721.png Playbook - Knowing Your Battle Space - Part 4 Lockheed Martin Cyber Kill Chain https://security-storm.com/playbook/2017/9/15/controlling-the-chaos-of-your-battle-space-part-2 monthly 0.5 2017-10-03 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504722182877-TJ1SLSYA9L4P796ZRWFC/Slide1.PNG Playbook - Knowing Your Battle Space - Part 2 Slide 1/8 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504719460839-53JMKWP3BRV7A43D85XX/df-control-details.png Playbook - Knowing Your Battle Space - Part 2 Adding Security Controls within DarkFalcon https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504719949233-694AVRSM3NK6VMD0RZQ3/df-control-wordcloud.png Playbook - Knowing Your Battle Space - Part 2 Word cloud of sample Security Controls based on the number of ATT&CK Tactics that are linked to them https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504722234639-EIY803JTY286CD2JRKUS/Slide3.PNG Playbook - Knowing Your Battle Space - Part 2 Slide 3/8 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504727374772-MAF8R3Q39U0PQGDQZVP4/Slide8.PNG Playbook - Knowing Your Battle Space - Part 2 Slide 8/8 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504722217402-3VR99ZADEWV0K8YF4B72/Slide2.PNG Playbook - Knowing Your Battle Space - Part 2 Slide 2/8 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504727349230-PWJWI6G7OYOG0VGOIRH8/Slide7.PNG Playbook - Knowing Your Battle Space - Part 2 Slide 7/8 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504722255463-QMDD3456ZWTNTFTCEHPK/Slide4.PNG Playbook - Knowing Your Battle Space - Part 2 Slide 4/8 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504727323001-Z5R8TEO68W92O0KW1RVN/Slide6.PNG Playbook - Knowing Your Battle Space - Part 2 Slide 6/8 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504719719830-YGBGJU60NOC44A6L5AS2/df-control-mostleast.png Playbook - Knowing Your Battle Space - Part 2 The most and least frequently used Security Controls with ATT&CK Tactics https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504638467088-0LWTQT5OEHK35ZPZ71M1/falcon_v2_wide-whitebg.png Playbook - Knowing Your Battle Space - Part 2 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504637112570-2Z3P0DH5R7X6JIHD5GTI/df-tactic-scoring.png Playbook - Knowing Your Battle Space - Part 2 Scoring a MITRE ATT&CK Tactic in DarkFalcon https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504637273346-D26ULOSIGVHGXHSQJLJX/df-tactic-details.png Playbook - Knowing Your Battle Space - Part 2 Details of a MITRE ATT&CK Tactic in DarkFalcon https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504719539704-8PCUDQY5F0BFNU7GISBC/df-control-tactic-link.png Playbook - Knowing Your Battle Space - Part 2 Linking Security Controls to ATT&CK Tactics https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504727299539-WVWY8M9WENMXL51YG5ES/Slide5.PNG Playbook - Knowing Your Battle Space - Part 2 Slide 5/8 https://security-storm.com/playbook/2017/9/14/knowing-your-battle-space-part-1 monthly 0.5 2017-09-15 https://security-storm.com/playbook/2017/9/6/blastin-and-castin-part-4 monthly 0.5 2017-09-06 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725599475-DIBYD0C0TXH1Z78X1D9E/Phishing_Indicator_Action_Menu_2.PNG Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504726019781-0O2DZVQRGLIFRIU0UAZ2/Phishing_Indicator_Phishing_Signature_Action.PNG Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725756505-SCO9X21T3WQSBWDQ0HMI/image-asset.png Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725680694-CJNG78H9XP5V79ZCSI3D/image-asset.png Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725735269-N1BX4HUDE89HNX9B6401/Phish_Indicator_Results.PNG Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725815219-TWUA00TMEDW0M4W73GGP/Phish_Indicator_Delete_Command.PNG Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725661426-HE2VWIHGHJ4AV9VOAOUP/Phish_Indicator_CSV.PNG Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725521082-6537P732AEA8M2BCIYTZ/Phish_Indicator_Email_Searcher.PNG Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725993864-VIXCBXEPKP5LQCBMFBMM/Phish_Indicator_Phishing_Signature.PNG Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725929267-6PLHHGB59FJ8E70M7WVA/image-asset.png Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725902352-P31NNRWKEA2FXQZ927U0/image-asset.png Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725575881-LI1FB2RPPY9XP88B8KKF/Phishing_Indicator_Action_Menu.png Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725637626-062FKTKYL9TM20NX6RAA/image-asset.png Playbook - BLASTIN AND CASTIN - PART 4 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1504725436588-A409N24FL9Q907I766DN/Phish_Indicator_Dashboard.PNG Playbook - BLASTIN AND CASTIN - PART 4 https://security-storm.com/playbook/2017/8/21/blastin-and-castin-part-3 monthly 0.5 2017-08-21 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1503333121763-8EQ75LC6896VRDR9NNNJ/8mbZ_4yhynnh5EIJVwRTj3Nr-xPU86tWGc5AnBC-A6BIaMN0lB7z_3cqks8nx1P6uUxl%3Dh900.png Playbook - Blastin and Castin - Part 3 https://security-storm.com/playbook/2017/8/10/blastin-and-castin-part-2 monthly 0.5 2017-08-21 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1502414911285-T31VLT0USA9S87TFND80/Phishing_Metrics_Dashboard Playbook - Blastin and Castin - Part 2 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1502414690165-M1ON8WG10H1XWWBIMZ50/phishing_whitelist Playbook - Blastin and Castin - Part 2 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1502414845561-EW44X0BSR7X2MDAJDKHY/Signatured_Events Playbook - Blastin and Castin - Part 2 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1502414777706-DAEM0CR2MIFYKKEOFD3V/Phishing_signature_Dashboard Playbook - Blastin and Castin - Part 2 https://security-storm.com/playbook/2017/8/1/blastin-and-castin-part-1 monthly 0.5 2017-08-11 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1502247876654-2V692EP0IP6J7N7C74Q1/Summarized+ESA+Event.png Playbook - Blastin and Castin - Part 1 Figure 1. summary_esa event with all of the compacted fields. https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1501641207336-YFR1KDVJXJWRIZY2ZEJV/image-asset.jpeg Playbook - Blastin and Castin - Part 1 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1502247981853-L62XWMJ2LVUT9H69BGP8/image-asset.png Playbook - Blastin and Castin - Part 1 https://security-storm.com/playbook/category/Threat+Response monthly 0.5 https://security-storm.com/playbook/category/Threat+Hunting monthly 0.5 https://security-storm.com/playbook/category/Detection+and+Monitoring monthly 0.5 https://security-storm.com/playbook/category/Situational+Awareness monthly 0.5 https://security-storm.com/playbook/tag/Blue+Team monthly 0.5 https://security-storm.com/playbook/tag/Cloud monthly 0.5 https://security-storm.com/playbook/tag/Detection monthly 0.5 https://security-storm.com/playbook/tag/AWS monthly 0.5 https://security-storm.com/playbook/tag/Monitoring monthly 0.5 https://security-storm.com/mission daily 0.75 2017-08-02 https://images.squarespace-cdn.com/content/v1/5877f45d725e25e5946bf59a/1501640390430-N37RE4A48BQ3GSP89NMT/image-asset.jpeg Mission https://security-storm.com/quotes daily 0.75 2018-04-06 https://security-storm.com/our-mission-foster daily 0.75 2025-05-08 https://images.squarespace-cdn.com/content/v1/5794fb301b631bb13257714c/1475094647199-BTSXAL89DIEEN8PUE5EJ/foster-juice-our-roots-v2.jpg Our Mission