Security operations notes and incident-response exercises

YB is a working collection of security operations notes, incident-response exercises, and hands-on labs. It’s less polished than finished writeups and more focused on what actually worked during detection, escalation, and response.

What’s in it

The repo is organized around real SOC workflow: detection notes, triage steps, escalation decisions, and lab setups that support hands-on practice instead of slide decks.

How I use it

I treat it as a running field notebook. Entries are added after lab work or response drills, with enough context to rerun the scenario later.

Full notes and exercises are in the repo linked above.