KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #typescript #codex #ai-agents #claude-code #dsh #dsh-plugin #cli #macos #ai-agent #deepseek-harness #open-source

ExpertInvestigationGuides

★ 51 Open GitHub ↗

Expert Investigation Guides

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Expert Investigation Guides

## Investigation Playbook Specification

These investigation guides adhere to the structure and conventions published here:

*	[Investigation Playbook Markdown Specification](https://github.com/Foundstone/InvestigationPlaybookSpec)

That specification shows how to use Markdown to capture investigation specific semantics.

The main goal of these extensions is to provide some structure to the investigation questions such that they can be reused, tagged and managed. Sample playbooks or guides are included in the repository to ilustrate the format and style writing.

This project was presented by Francisco Matias Acuna-Cuenca and Ismael Valenzuela at the SANS SOC Summit 2017. The presentation is available here:

*	["The Need for Investigation Playbooks at the SOC" by Francisco Matias Cuenca-Acuna & Ismael Valenzuela, SANS SOC Summit 2017](https://content.sans.org/sites/default/files/2021-03/The%20Need%20for%20Investigation%20Playbooks%20in%20the%20SOC.pdf)

On this repository you will also find a few examples of investigation guides that use this spec.

## Published Investigation Guides

*	[Threat Hunting](https://github.com/Foundstone/ExpertInvestigationGuides/tree/master/ThreatHunting)

ExpertInvestigationGuides

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README