We needthese logsin SplunkWe needthat onthe wikiHave youlooked inWiz?CompromiseIOCIRtakespriorityYour goalis to markyourselfas proDo I haveaccess tothis?I’mhelpingout on-callI can setyou upwith amentorForensicAnalysisIt’s been ameetingheavy daySecurityevent notan IRThisgoes toLevel 2Did younotifySVIC?Did youlook atsessiontrafficTell memoreabout…Look at thegeographicaldataThis isTORWe willautomateDoes thislookmalicious?Add moreresourcesSo who hasquestionsabout theirticket?I needsomecoffeeI don’thaveaccessWe needthese logsin SplunkWe needthat onthe wikiHave youlooked inWiz?CompromiseIOCIRtakespriorityYour goalis to markyourselfas proDo I haveaccess tothis?I’mhelpingout on-callI can setyou upwith amentorForensicAnalysisIt’s been ameetingheavy daySecurityevent notan IRThisgoes toLevel 2Did younotifySVIC?Did youlook atsessiontrafficTell memoreabout…Look at thegeographicaldataThis isTORWe willautomateDoes thislookmalicious?Add moreresourcesSo who hasquestionsabout theirticket?I needsomecoffeeI don’thaveaccess

Buzz Phrase Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. We need these logs in Splunk
  2. We need that on the wiki
  3. Have you looked in Wiz?
  4. Compromise IOC
  5. IR takes priority
  6. Your goal is to mark yourself as pro
  7. Do I have access to this?
  8. I’m helping out on-call
  9. I can set you up with a mentor
  10. Forensic Analysis
  11. It’s been a meeting heavy day
  12. Security event not an IR
  13. This goes to Level 2
  14. Did you notify SVIC?
  15. Did you look at session traffic
  16. Tell me more about…
  17. Look at the geographical data
  18. This is TOR
  19. We will automate
  20. Does this look malicious?
  21. Add more resources
  22. So who has questions about their ticket?
  23. I need some coffee
  24. I don’t have access