It’s been ameetingheavy dayThisgoes toLevel 2Does thislookmalicious?I’mhelpingout on-callI can setyou upwith amentorHave youlooked inWiz?Your goalis to markyourselfas proForensicAnalysisLook at thegeographicaldataWe needthese logsin SplunkTell memoreabout…So who hasquestionsabout theirticket?This isTORWe willautomateWe needthat onthe wikiCompromiseIOCDid youlook atsessiontrafficAdd moreresourcesDid younotifySVIC?IRtakespriorityDo I haveaccess tothis?Securityevent notan IRI don’thaveaccessI needsomecoffeeIt’s been ameetingheavy dayThisgoes toLevel 2Does thislookmalicious?I’mhelpingout on-callI can setyou upwith amentorHave youlooked inWiz?Your goalis to markyourselfas proForensicAnalysisLook at thegeographicaldataWe needthese logsin SplunkTell memoreabout…So who hasquestionsabout theirticket?This isTORWe willautomateWe needthat onthe wikiCompromiseIOCDid youlook atsessiontrafficAdd moreresourcesDid younotifySVIC?IRtakespriorityDo I haveaccess tothis?Securityevent notan IRI don’thaveaccessI needsomecoffee

Buzz Phrase Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. It’s been a meeting heavy day
  2. This goes to Level 2
  3. Does this look malicious?
  4. I’m helping out on-call
  5. I can set you up with a mentor
  6. Have you looked in Wiz?
  7. Your goal is to mark yourself as pro
  8. Forensic Analysis
  9. Look at the geographical data
  10. We need these logs in Splunk
  11. Tell me more about…
  12. So who has questions about their ticket?
  13. This is TOR
  14. We will automate
  15. We need that on the wiki
  16. Compromise IOC
  17. Did you look at session traffic
  18. Add more resources
  19. Did you notify SVIC?
  20. IR takes priority
  21. Do I have access to this?
  22. Security event not an IR
  23. I don’t have access
  24. I need some coffee