Hi, what an incident response playbook?  Incident Response Playbook is the guide lines and group of processes, policies, plans, and procedures, along with appropriate oversight of response activities, that  the organization should take to make a proactive response, quick containment, effective remediation and action plan with "what if" scenario in case of certain cyber incident has taken place. How do you build an incident response playbook? Regarding to NIST, to build an Incident Response Playbook you need to design the process which contains 4 main phases: 1- Prepare. 2- Detect and Analyze. 3- Contain, Eradicate and Recover. 4- Post-Incident Handling. *reference, NIST Computer Security Incident Handling Guide: https://nvlpubs.nist.gov/nistp... *reference, SANS Incident Handler's Handbook: https://www.sans.org/reading-r... Do SOAR solutions come with a pre-defined playbook as a starting point? - Sure, most of SOAR solutions today comes with predefined templates. However, it's a double-bladed weapon based on Cyber Security Awareness and maturity level of the organization. If it's implemented with no or low maturity level, it may harm the organization production and utilize the resources improperly.