Defensive Cyber Operations Checklist

Excerpt from "Hunt Methodology" By Christian B.

Introduction

The DCO Evaluation Checklist may be used to train, evaluate and assess the Defensive Cyber Operations Teams. This worksheet includes the supported MET and representative associated Measures of Performance (MOPs). The trainer or assessor will enhance the MOPs to satisfy training or assessment requirements.

This checklist does not include any hunt methodology, but it will cover basic steps that need to be taken in order to conduct a DCO exercise. The SOC Lead should use this checklist as a tool to ensure they aren’t missing essential steps.