Technical Stack / Tools / Frameworks NIST 800-61, NIST CSF Respond/Recover, MITRE ATT&CK, incident response playbooks, SIEM platforms such as Microsoft Sentinel/Splunk/QRadar/LogRhythm, EDR/XDR platforms such as Microsoft Defender/CrowdStrike/SentinelOne, forensic tools, malware analysis workflows, SOAR concepts, ticketing systems, threat intelligence feeds, IOC management, vulnerability management platforms, endpoint management tools, backup/recovery coordination tools, and executive incident