Create

IR Tabletop Inject Selector 2026-06-11 Wheel

How to use: Spin to pick the next tabletop inject to discuss.

Copy and Edit This Wheel

All 4 incident response tabletop injects

Credential stuffing spike on legacy VPNSuspicious OAuth consent grant from finance tenantEndpoint isolation request for executive laptopUnexpected DNS tunneling alerts from lab subnet

About the IR Tabletop Inject Selector 2026-06-11 Wheel

Use this wheel when a security team wants a lightweight way to pick the next tabletop scenario without over-planning the exercise. It is tailored for incident response facilitators who want realistic but varied prompts. The options emphasize identity, endpoint, network, and cloud-control-plane situations so teams can practice triage, communications, and escalation paths across different domains.