ciso.diy
M365 Posture + Response preview
Bundles M365Microsoft 365incident responseaccount takeover

M365 Posture + Response

The M365 Security Posture Kit plus the IR Runbook Library. Know what a compromised account can reach, and have the runbook ready when one is. 15% off buying separately.

What this actually gives you

  • Why the pair: the posture kit's detection readiness matrix is the question the runbook's first hour depends on. Assess before the incident, and the runbook has evidence to run on.

The posture kit tells you what a compromised Microsoft 365 account could reach and what to close. The runbook library is what you execute when one is — runbook 03 is M365 and cloud account takeover, AiTM session-cookie theft and MFA bypass, with role checklists, communication templates and the notification list.

M365 Security Posture Kit — five modules and one page: a licence-tier-aware blast-radius score, a Conditional Access / Entra ID Protection / PIM identity review, a CIS-aligned hardening baseline, a data governance review and a detection readiness matrix.

IR Runbook Library — 18 ready-to-execute runbooks in 2026 threat-priority order, each with six roles, a four-tier severity matrix, indicators of compromise, five NIST SP 800-61 phase checklists and communication templates.

Why the pair: the posture kit's detection readiness matrix is the question the runbook's first hour depends on — whether you can see the account's mailbox, file and app-consent activity from one view. Assess before the incident, and the runbook has evidence to run on.

What's included

  • Complete Library (.zip) — all formats included — fully editable
  • Instant download after purchase
  • Free updates — re-download when we release new versions
  • Practitioner License: unlimited client use (vCISO / MSP)

Choose your license:

  • Secure checkout via Stripe
  • All major cards accepted
  • 30-day satisfaction guarantee
Version 1.0
Last updated 2026-09-09