picerl

A real-world PUP incident response case study following the PICERL framework, with PowerShell triage scripts and Sigma detection rules.

Complete incident response framework implementing the PICERL model - severity classification, evidence collection, containment, eradication, recovery, and lessons learned

SOC incident response simulation demonstrating detection, analysis, containment, and recovery of a malware-based security incident.

A full incident response simulation following the PICERL lifecycle, detection and containment through eradication and recovery, with chain-of-custody documentation.