Delete TTPs/SANS/GCIH/504Book1.py
This commit is contained in:
@ -1,21 +0,0 @@
|
|||||||
from Modules.Imports.ttp_imports import *
|
|
||||||
|
|
||||||
def gcih_book1_submenu():
|
|
||||||
build_submenu("504 Book 1", module=globals())
|
|
||||||
|
|
||||||
def picerl_overview():
|
|
||||||
"""
|
|
||||||
Provides an overview of the PICERL incident response framework.
|
|
||||||
"""
|
|
||||||
title = "PICERL Incident Response Framework Overview"
|
|
||||||
content = """
|
|
||||||
### PICERL Framework:
|
|
||||||
- **Preparation**: Develop and implement incident response policies, procedures, and tools to handle incidents effectively.
|
|
||||||
- **Identification**: Detect and verify potential security incidents using monitoring tools and processes.
|
|
||||||
- **Containment**: Limit the scope and impact of the incident by isolating affected systems.
|
|
||||||
- **Eradication**: Remove the root cause of the incident, including malware, compromised accounts, or vulnerabilities.
|
|
||||||
- **Recovery**: Restore affected systems to normal operation and validate that the threat has been neutralized.
|
|
||||||
- **Lessons Learned**: Review the incident response process, document findings, and improve future readiness.
|
|
||||||
"""
|
|
||||||
resource = "https://www.sans.org/media/score/504-incident-response-cycle.pdf"
|
|
||||||
print_info(title, content, resource)
|
|
Reference in New Issue
Block a user