Voices from recent desks
Formats vary on purpose: some names are full, some minimal, some carry ratings, one is intentionally spare.
The Alert Triage Intensive surge replay made our backlog conversation measurable instead of emotional. I still reuse the queue instrumentation worksheet on Mondays.
Foundations triage packet forced me to cite artifacts before escalating. Short, sharp improvement.
Detection studio’s duplication audit felt uncomfortable in the best way—two near-identical rules retired the same week.
Leadership studio gave me language for backlog negotiation that did not sound like blame. Still adapting the ops review deck to our culture.
Hunt lab’s falsifiable hypothesis worksheet stopped me from “search the universe” spirals. Five stars for the timer discipline alone.
Metrics clinic helped us retire a vanity heatmap nobody trusted. Replacement is smaller and actually read by executives.
Purple tabletop scribe template kept our debrief from dissolving into anecdotes. Would like one more example for MSP clients, but solid baseline.