WaterISAC Navigation
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
Home H2OSecCon 2026 (TLP:CLEAR) CISA Releases Free Eviction Strategies Tool to Complement Incident Response
Become a Member

Log in

  • Upcoming Events
  • Resource Center
  • Tools
  • Webcasts
  • Contaminant Databases
  • Community Partners
  • About
  • Log in

  • My Account

  • Logout

  • Report Incident
  • Contact Us
  • NRWA Signup
  • WaterISAC Champions
More Resources

(TLP:CLEAR) CISA Releases Free Eviction Strategies Tool to Complement Incident Response

TLP:CLEAR

Author: Chase Snow

Created: Thursday, July 31, 2025 - 15:02

Categories: Cybersecurity, Federal & State Resources, Security Preparedness

Summary: Yesterday, CISA released an Eviction Strategies Tool, a no-cost resource designed to support cyber defenders in their effort to respond to cyber incidents.

The Eviction Strategies Tool is comprised of:

  • Playbook-NG, a web application for next-generation operations; and
  • COUN7ER, a database of atomic post-compromise countermeasures mapped to adversary tactics, techniques, and procedures.

Analyst Note: This new free resource is another valuable free tool that network defenders can add to their arsenal to aid incident response. CISA notes that the tool addresses a critical gap: the need for a clear understanding of the necessary actions to properly contain and evict adversaries from networks and devices. CISA designed Playbook-NG and COUN7ER to substantially accelerate the creation of response plans and to assist defenders with tailored adversary eviction strategies. WaterISAC highly recommends members make use of this valuable free resource to aid in the creation and implementation of effective incident response activities.

Original Source: https://www.cisa.gov/eviction-strategies-tool

Additional Reading:

  • CISA Unveils Eviction Strategies Tool to Aid Incident Response

Related WaterISAC PIRs: 12

Related Resources

Members Only

(TLP:AMBER) DHS Office of Intelligence and Analysis Reports (May 21, 2026)

May 21, 2026 in Cybersecurity, Federal & State Resources, Security Preparedness

(TLP:CLEAR) Weekly Vulnerabilities to Prioritize – May 21, 2026

May 21, 2026 in Cybersecurity, Security Preparedness
Members Only

(TLP:GREEN) PEAR Ransomware Claims U.S. Drinking Water Utility as Victim

May 21, 2026 in Cybersecurity, Security Preparedness

Become a Member
FAQs
About
Report Incident

Terms & Conditions
Privacy Policy
AI Policy
Contact Us

LinkedIn

1250 I Street NW, Suite 350
Washington, DC 20005
1-866-H2O-ISAC (1-866-426-4722)
© 2026 WaterISAC. All Rights Reserved.

Toggle the Widgetbar