1.06-Create and Execute IR Orders
Create and execute IR Team Orders Task¶
Conditions¶
Given an OPORD for IR Team Operations
Standards¶
Create and execute DCO Orders:
- Enter Request for orders
- Establish Rules of Engagement
- Execute supporting documents
End State¶
Orders and executing documents are executed
Notes¶
Manual Steps¶
Running Script¶
Dependencies¶
Other available tools¶
References¶
NIST Cyber Security Framework
NIST SP 800-184: Guide to Cyber Event Recovery