We needthat onthe wikiIt’s been ameetingheavy dayTell memoreabout…Add moreresourcesI’mhelpingout on-callDo I haveaccess tothis?So who hasquestionsabout theirticket?I can setyou upwith amentorSecurityevent notan IRThisgoes toLevel 2ForensicAnalysisDid youlook atsessiontrafficI needsomecoffeeIRtakespriorityCompromiseIOCDid younotifySVIC?We willautomateYour goalis to markyourselfas proHave youlooked inWiz?I don’thaveaccessWe needthese logsin SplunkDoes thislookmalicious?Look at thegeographicaldataThis isTORWe needthat onthe wikiIt’s been ameetingheavy dayTell memoreabout…Add moreresourcesI’mhelpingout on-callDo I haveaccess tothis?So who hasquestionsabout theirticket?I can setyou upwith amentorSecurityevent notan IRThisgoes toLevel 2ForensicAnalysisDid youlook atsessiontrafficI needsomecoffeeIRtakespriorityCompromiseIOCDid younotifySVIC?We willautomateYour goalis to markyourselfas proHave youlooked inWiz?I don’thaveaccessWe needthese logsin SplunkDoes thislookmalicious?Look at thegeographicaldataThis isTOR

Buzz Phrase Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. We need that on the wiki
  2. It’s been a meeting heavy day
  3. Tell me more about…
  4. Add more resources
  5. I’m helping out on-call
  6. Do I have access to this?
  7. So who has questions about their ticket?
  8. I can set you up with a mentor
  9. Security event not an IR
  10. This goes to Level 2
  11. Forensic Analysis
  12. Did you look at session traffic
  13. I need some coffee
  14. IR takes priority
  15. Compromise IOC
  16. Did you notify SVIC?
  17. We will automate
  18. Your goal is to mark yourself as pro
  19. Have you looked in Wiz?
  20. I don’t have access
  21. We need these logs in Splunk
  22. Does this look malicious?
  23. Look at the geographical data
  24. This is TOR