From 3978ee22860a7dc861a5083f25c0e5dccab4b34e Mon Sep 17 00:00:00 2001 From: Matthew Iverson Date: Thu, 28 Nov 2024 00:53:14 -0500 Subject: [PATCH] Delete TTPs/SANS/GCIH/504Book1.py --- TTPs/SANS/GCIH/504Book1.py | 21 --------------------- 1 file changed, 21 deletions(-) delete mode 100644 TTPs/SANS/GCIH/504Book1.py diff --git a/TTPs/SANS/GCIH/504Book1.py b/TTPs/SANS/GCIH/504Book1.py deleted file mode 100644 index ffd3004..0000000 --- a/TTPs/SANS/GCIH/504Book1.py +++ /dev/null @@ -1,21 +0,0 @@ -from Modules.Imports.ttp_imports import * - -def gcih_book1_submenu(): - build_submenu("504 Book 1", module=globals()) - -def picerl_overview(): - """ - Provides an overview of the PICERL incident response framework. - """ - title = "PICERL Incident Response Framework Overview" - content = """ -### PICERL Framework: -- **Preparation**: Develop and implement incident response policies, procedures, and tools to handle incidents effectively. -- **Identification**: Detect and verify potential security incidents using monitoring tools and processes. -- **Containment**: Limit the scope and impact of the incident by isolating affected systems. -- **Eradication**: Remove the root cause of the incident, including malware, compromised accounts, or vulnerabilities. -- **Recovery**: Restore affected systems to normal operation and validate that the threat has been neutralized. -- **Lessons Learned**: Review the incident response process, document findings, and improve future readiness. -""" - resource = "https://www.sans.org/media/score/504-incident-response-cycle.pdf" - print_info(title, content, resource) \ No newline at end of file