SCOR Module 04 · Incident Response Preparation
Write the detection signatures and response playbooks that run when they fire.
About this course
This one-hour module is the fourth function of METEORSTORM (Multiple Environment Threat Exposure of Resources: Space Threats and Operational Risk to Missions). You write detection signatures that fire on the sources enumerated in Module 03, and the response playbooks they authorize, with approved actions across assess, contain, recover, and report, and clear assignment of who decides and who executes. This is the detect, report, and recover capability Executive Order 14144 requires, delivered inside the 24 and 72 hour reporting clocks the NIS2 Directive sets.
The session opens live on a Saturday, continues through one week of asynchronous instructor support, and closes with a virtual close-out the following Friday at 13:00 Eastern Time. Each module stands alone and may be taken independently.
What is included
- One hour of live instructor led training
- Detection signatures paired with response playbooks and authorization roles
- One week of asynchronous instructor support after the live session
- A virtual close-out session the following Friday
Session Schedule, September to October 2026 (Saturday kickoff)
Times are Eastern Time. Seats are limited to 15 per session.
| Cohort | Live kickoff (Saturday) | Time (ET) | Virtual close-out |
|---|---|---|---|
| Cohort A | Saturday 19 September 2026 | 14:15 to 15:15 | Friday 25 September 2026, 13:00 |
| Cohort B | Saturday 10 October 2026 | 14:15 to 15:15 | Friday 16 October 2026, 13:00 |
How to enroll
Preregistration through our Center of Excellence costs nothing and collects no payment details. We review seat availability, confirm your session, and send a payment request personally before anything is charged. Seats are limited to 15 per session.
Provider
D2 Team CORP is a 501(c)(3) nonprofit public charity. Questions about this course: [email protected].