DOCS / GUIDES

Fox drills: incident response

Plan, rehearse, and run security incidents without panic.

Advanced15 min read
Before you beginYou need the cluck CLI, a Pollosoft account, and a coop to work in. This guide assumes you are comfortable with the basics. If you are not, start with Getting started.

Overview

Plan, rehearse, and run security incidents without panic. The whole thing takes about 15 minutes, and the commands below are the ones you will use along the way.

$ cluck crow --channel security --message "Drill: fox at the fence"
$ cluck status --incident
$ cluck fence lock

Steps

  1. Write the plan. Define who is in charge, who communicates, and who actually fixes things. Print it. Chickens like checklists.
  2. Run a drill. Use the Fowl Play Detector simulator to stage a fox. Time how long your flock takes to notice.
  3. Contain. cluck fence lock closes the coop door. Traffic stops, the fox is confused, and the investigation begins.
  4. Review. Hold a blameless review. Nobody blames a chicken for fearing a fox. Update the plan and run another drill next month.

Commands used

Keep going

Stuck? Check the error codes, the FAQ, or the glossary.