This kit has moved to Gumroad.

Gatorbyte #007 — IR Tabletop-in-a-Box now lives here — still free, still yours to keep:

**https://thesecuritygator.gumroad.com/l/gb007-ir-tabletop-in-a-box**

What you get there instead

Everything needed to run a 60-minute incident-response tabletop with no consultants: the facilitator's agenda, three scenario decks (ransomware, vendor breach, business email compromise), the role cards, and the after-action register where three gaps get three owners and three dates. It is an offline HTML tool that opens in any browser — no account, no sign-in, no internet connection, nothing phoning home — plus a print-ready PDF, and CSV + Excel copies of the after-action register.

Supports IR-readiness and audit-prep workflows — not legal advice and not a substitute for professional incident response services. During a REAL incident, follow your IR plan and engage counsel/insurer per its terms.


This Notion page is closed and no longer maintained. The scenario decks, role cards, and After-Action Register below are left in place for anyone who already duplicated them, but they will not be updated. Everything above is the current version.

Scenario Deck A — Ransomware (machine-speed)

Scenario Deck B — Vendor breach

Scenario Deck C — Business email compromise

Role cards

After-Action Register