IRtakesprioritySecurityevent notan IRI needsomecoffeeI’mhelpingout on-callForensicAnalysisCompromiseIOCThisgoes toLevel 2Your goalis to markyourselfas proAdd moreresourcesWe needthat onthe wikiI can setyou upwith amentorLook at thegeographicaldataThis isTORI don’thaveaccessDo I haveaccess tothis?Tell memoreabout…It’s been ameetingheavy dayHave youlooked inWiz?Does thislookmalicious?Did younotifySVIC?We needthese logsin SplunkDid youlook atsessiontrafficSo who hasquestionsabout theirticket?We willautomateIRtakesprioritySecurityevent notan IRI needsomecoffeeI’mhelpingout on-callForensicAnalysisCompromiseIOCThisgoes toLevel 2Your goalis to markyourselfas proAdd moreresourcesWe needthat onthe wikiI can setyou upwith amentorLook at thegeographicaldataThis isTORI don’thaveaccessDo I haveaccess tothis?Tell memoreabout…It’s been ameetingheavy dayHave youlooked inWiz?Does thislookmalicious?Did younotifySVIC?We needthese logsin SplunkDid youlook atsessiontrafficSo who hasquestionsabout theirticket?We willautomate

Buzz Phrase Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. IR takes priority
  2. Security event not an IR
  3. I need some coffee
  4. I’m helping out on-call
  5. Forensic Analysis
  6. Compromise IOC
  7. This goes to Level 2
  8. Your goal is to mark yourself as pro
  9. Add more resources
  10. We need that on the wiki
  11. I can set you up with a mentor
  12. Look at the geographical data
  13. This is TOR
  14. I don’t have access
  15. Do I have access to this?
  16. Tell me more about…
  17. It’s been a meeting heavy day
  18. Have you looked in Wiz?
  19. Does this look malicious?
  20. Did you notify SVIC?
  21. We need these logs in Splunk
  22. Did you look at session traffic
  23. So who has questions about their ticket?
  24. We will automate