Security Operations Pack

What's inside

1. Prompt
   Security Incident Response Playbook for a Specific Scenario

   Writes an incident response playbook for one scenario — phishing compromise, ransomware, leaked credentials, cloud key exposure — with detection, triage, containment, eradication, recovery and communication steps.

2. Prompt
   SIEM Detection Rule Design and Tuning

   Designs detection rules for a specific threat behaviour — data sources, logic, thresholds, enrichment, false-positive tuning and response steps — mapped to attacker techniques.

3. Prompt
   Vulnerability Management Prioritisation Plan

   Turns a flood of scanner findings into a prioritised remediation plan — exploitability, exposure, asset criticality, compensating controls — with SLAs, owners and exception handling.

4. Prompt
   Phishing Report Triage Runbook for Analysts

   A step-by-step runbook for triaging user-reported phishing — header and link analysis, sandboxing, scope search, mailbox clean-up, account checks and user feedback — fast and consistent.

5. Prompt
   Cloud Security Posture Review for a Small Team

   Reviews cloud accounts for the misconfigurations attackers exploit first — public storage, exposed keys, broad IAM, missing logging, unencrypted data, open ports — and prioritises fixes for a small team.

6. Prompt
   Security Tabletop Exercise Design for Leadership and IT

   Designs a tabletop exercise that tests how leaders and IT handle a realistic incident — scenario injects, decisions, communication and legal questions — and turns gaps into an improvement plan.

7. Skill
   Security Operations Analyst Lead

   A standing SOC lead: incident playbooks, detections, phishing triage, vulnerability prioritisation, cloud posture and tabletop exercises — evidence-first, safe handling of malicious content, legal points flagged.

From the wider PromptCorrectly library, picked for the same work. They come in the same .zip and the start file tells your AI when to use each one.

1. Prompt
   Security Incident Postmortem Author

   Drafts a blameless post-incident review with timeline, root cause, and corrective actions ready for leadership.

   Library · In a pack
2. Prompt
   STRIDE Threat Model For A New Service

   Builds a structured STRIDE threat model for a system with trust boundaries, ranked threats, and concrete mitigations.

   Library · Free
3. Prompt
   Penetration Test Scope And Rules Of Engagement

   Drafts a rigorous pentest scope, rules of engagement, and safety guardrails before any testing begins.

   Library · Free
4. Prompt
   Third Party Vendor Security Assessment

   Evaluates a vendor's security posture from questionnaire and attestation evidence into a go/no-go risk rating.

   Library · In a pack
5. Prompt
   Executive Cyber Risk Board Briefing Writer

   Translates technical security status into a concise, decision-oriented board briefing with metrics and asks.

   Library · In a pack
6. Prompt
   Security Policy Drafting Assistant

   Writes a clear, enforceable security policy mapped to a control framework with scope, roles, and exceptions.

   Library · In a pack
7. Prompt
   Outage And Incident Customer Communication Kit

   Produces clear, honest incident updates for customers at each stage of an outage, balancing transparency and reassurance.

   Library · In a pack

A look inside

ROLE: You are an incident response lead who has run real incidents at 3am. You write playbooks that a tired analyst can follow step by step, with clear decision points, evidence preservation and who to call.

CONTEXT: The scenario to cover: [SCENARIO]. Our environment (identity …

Questions