Virus Outbreak
Comprehensive incident response playbook for handling a self-replicating virus outbreak affecting multiple systems across the network. Unlike general malware, viruses propagate by attaching themselves to legitimate host files, boot sectors, or documents and spread through file sharing, removable media, and network connections. This playbook covers antivirus signature-based detection, self-replication analysis, file infection pattern identification, boot sector examination, quarantine procedures, AV deployment and updates, clean system imaging, and network-level virus propagation blocking based on the NIST Computer Security Incident Handling Guide (SP 800-61).
This playbook follows the NIST Incident Response Framework with 7 phases and 14 total steps.
Response Phases
Click a phase to view its steps, or click a step to view its flowchart