IRtakespriorityWe needthat onthe wikiCompromiseIOCWe needthese logsin SplunkLook at thegeographicaldataYour goalis to markyourselfas proTell memoreabout…I’mhelpingout on-callAdd moreresourcesI can setyou upwith amentorSo who hasquestionsabout theirticket?Securityevent notan IRForensicAnalysisWe willautomateI needsomecoffeeHave youlooked inWiz?Do I haveaccess tothis?It’s been ameetingheavy dayDid younotifySVIC?Does thislookmalicious?I don’thaveaccessThis isTORThisgoes toLevel 2Did youlook atsessiontrafficIRtakespriorityWe needthat onthe wikiCompromiseIOCWe needthese logsin SplunkLook at thegeographicaldataYour goalis to markyourselfas proTell memoreabout…I’mhelpingout on-callAdd moreresourcesI can setyou upwith amentorSo who hasquestionsabout theirticket?Securityevent notan IRForensicAnalysisWe willautomateI needsomecoffeeHave youlooked inWiz?Do I haveaccess tothis?It’s been ameetingheavy dayDid younotifySVIC?Does thislookmalicious?I don’thaveaccessThis isTORThisgoes toLevel 2Did youlook atsessiontraffic

Buzz Phrase Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. IR takes priority
  2. We need that on the wiki
  3. Compromise IOC
  4. We need these logs in Splunk
  5. Look at the geographical data
  6. Your goal is to mark yourself as pro
  7. Tell me more about…
  8. I’m helping out on-call
  9. Add more resources
  10. I can set you up with a mentor
  11. So who has questions about their ticket?
  12. Security event not an IR
  13. Forensic Analysis
  14. We will automate
  15. I need some coffee
  16. Have you looked in Wiz?
  17. Do I have access to this?
  18. It’s been a meeting heavy day
  19. Did you notify SVIC?
  20. Does this look malicious?
  21. I don’t have access
  22. This is TOR
  23. This goes to Level 2
  24. Did you look at session traffic