Incident response lifecycle as a runbook: roles, evidence, communication and the review
The incident response lifecycle turned into a runbook a small team can follow under pressure: preparation, detection and analysis, containment, eradication, recovery and the post-incident review, with roles, evidence handling and communication templates.