Incident Response Playbook

This lab documents workflows for phishing, malware, and insider threats, including KQL queries and response playbooks.