Select a scenario, customize the steps for your organization, and export a ready-to-use incident response playbook. Each template follows the NIST IR lifecycle.
1. Click on any of the incident scenarios below (e.g., Ransomware, BEC) to load its template.
2. The playbook will appear below the grid. Click directly on any action step's text to edit and customize it for your specific team or environment.
3. When finished, click Export PDF/DOCX to generate a document you can distribute to your IR team.
⚠️ Note: State is currently ephemeral. Your edits will be lost if you refresh the page or select a different scenario before exporting.