We needthese logsin SplunkI don’thaveaccessAdd moreresourcesI’mhelpingout on-callYour goalis to markyourselfas proDo I haveaccess tothis?This isTORWe willautomateI needsomecoffeeHave youlooked inWiz?Does thislookmalicious?Did younotifySVIC?Tell memoreabout…We needthat onthe wikiIt’s been ameetingheavy dayCompromiseIOCIRtakesprioritySecurityevent notan IRThisgoes toLevel 2So who hasquestionsabout theirticket?ForensicAnalysisI can setyou upwith amentorLook at thegeographicaldataDid youlook atsessiontrafficWe needthese logsin SplunkI don’thaveaccessAdd moreresourcesI’mhelpingout on-callYour goalis to markyourselfas proDo I haveaccess tothis?This isTORWe willautomateI needsomecoffeeHave youlooked inWiz?Does thislookmalicious?Did younotifySVIC?Tell memoreabout…We needthat onthe wikiIt’s been ameetingheavy dayCompromiseIOCIRtakesprioritySecurityevent notan IRThisgoes toLevel 2So who hasquestionsabout theirticket?ForensicAnalysisI can setyou upwith amentorLook at thegeographicaldataDid youlook atsessiontraffic

Buzz Phrase Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. We need these logs in Splunk
  2. I don’t have access
  3. Add more resources
  4. I’m helping out on-call
  5. Your goal is to mark yourself as pro
  6. Do I have access to this?
  7. This is TOR
  8. We will automate
  9. I need some coffee
  10. Have you looked in Wiz?
  11. Does this look malicious?
  12. Did you notify SVIC?
  13. Tell me more about…
  14. We need that on the wiki
  15. It’s been a meeting heavy day
  16. Compromise IOC
  17. IR takes priority
  18. Security event not an IR
  19. This goes to Level 2
  20. So who has questions about their ticket?
  21. Forensic Analysis
  22. I can set you up with a mentor
  23. Look at the geographical data
  24. Did you look at session traffic