It provides information not only on preparing for an incident, but also what to do during and after. Source is available on GitHub. Phantom Community Playbooks - Phantom Community Playbooks for Splunk ...