WaterISAC Navigation
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
Home Community Partnerships (TLP:CLEAR) CISA Releases Free Eviction Strategies Tool to Complement Incident Response
Become a Member

Log in

  • Upcoming Events
  • Resource Center
  • Tools
  • Webcasts
  • Contaminant Databases
  • Directory
  • About
  • Log in

  • My Account

  • Logout

  • Report Incident
  • Contact Us
  • NRWA Signup
  • WaterISAC Champions
More Resources

(TLP:CLEAR) CISA Releases Free Eviction Strategies Tool to Complement Incident Response

TLP:CLEAR

Author: Chase Snow

Created: Thursday, July 31, 2025 - 15:02

Categories: Cybersecurity, Federal & State Resources, Security Preparedness

Summary: Yesterday, CISA released an Eviction Strategies Tool, a no-cost resource designed to support cyber defenders in their effort to respond to cyber incidents.

The Eviction Strategies Tool is comprised of:

  • Playbook-NG, a web application for next-generation operations; and
  • COUN7ER, a database of atomic post-compromise countermeasures mapped to adversary tactics, techniques, and procedures.

Analyst Note: This new free resource is another valuable free tool that network defenders can add to their arsenal to aid incident response. CISA notes that the tool addresses a critical gap: the need for a clear understanding of the necessary actions to properly contain and evict adversaries from networks and devices. CISA designed Playbook-NG and COUN7ER to substantially accelerate the creation of response plans and to assist defenders with tailored adversary eviction strategies. WaterISAC highly recommends members make use of this valuable free resource to aid in the creation and implementation of effective incident response activities.

Original Source: https://www.cisa.gov/eviction-strategies-tool

Additional Reading:

  • CISA Unveils Eviction Strategies Tool to Aid Incident Response

Related WaterISAC PIRs: 12

Related Resources

Members Only

(TLP:AMBER+STRICT) Situation Report: Heightened Threat Environment – Potential Retaliation by Iranian Threat Actors Following U.S. Strikes on Iran (Updated May 1, 2026)

May 1, 2026 in Cybersecurity, OT-ICS Security, Physical Security, Security Preparedness

Tip of the Week – April 30, 2026

Apr 30, 2026 in Cybersecurity, Security Preparedness

(TLP:CLEAR) Cyber Readiness Institute Joins WaterISAC as a Community Partner to Strengthen Cyber Readiness Across the Water Sector

Apr 30, 2026 in Cybersecurity, Security Preparedness

Become a Member
FAQs
About
Report Incident

Terms & Conditions
Privacy Policy
AI Policy
Contact Us

LinkedIn

1250 I Street NW, Suite 350
Washington, DC 20005
1-866-H2O-ISAC (1-866-426-4722)
© 2026 WaterISAC. All Rights Reserved.

Toggle the Widgetbar