Lab runbook · 30-60 minutes
Suspicious Message Triage
Analyze fictional messages and select safe verification and reporting actions.
Read on the websiteCollection
Editable Lab Runbooks
Editable runbooks for controlled, authorization-bounded classroom practice.
Secondary, higher ed, professional5 individual resourcesRead online + download
Read a resource from this collection.
Choose a named resource to read it online or download just that item. The collection downloads contain only the resources listed here.
Lab runbook · 45-75 minutes
Identity and Account Recovery Design
Evaluate identity lifecycle and recovery controls for a fictional service.
Read on the websiteLab runbook · 60-90 minutes
Sanitized Log Triage
Build a timeline, identify relevant evidence, and maintain competing hypotheses.
Read on the websiteLab runbook · 60-90 minutes
Configuration Review and Change Plan
Identify weaknesses in an approved configuration and propose testable, reversible changes.
Read on the websiteLab runbook · 60-120 minutes
Incident Decision Tabletop
Coordinate technical, operational, privacy, legal, and communication decisions during a fictional incident.
Read on the websiteSource and use
The Complete Cybersecurity Educator · Dr. Jason Edwards. Editable companion - Editable Lab Runbooks.
Please do not resell this resource. You may repost or share it with other educators; keep the Bare Metal Cyber Educators Hub URL and source attribution intact. See the companion permissions. Use fictional or appropriately authorized material and follow the safety guidance in each resource.