# Cook Book, Notes and Shield

> The Blue Team reference tools in Oyster — Cook Book playbooks, shortcuts, ATT&CK detection cards and triage checklists; your own Notes; and Shield.

Source: https://documentation.redorca.ai/guides/blue-team/cook-book-and-notes/
Last updated: 2026-11-01

## Cook Book

A reference library that works with [SOC Copilot](https://documentation.redorca.ai/guides/blue-team/soc-copilot/). Open **Cook Book** under **Blue Team**. It has four sections:

- **Playbooks** — the playbook templates SOC Copilot uses. Browse them, and attach one to a case.
- **Shortcuts** — curated commands and queries you can copy.
- **ATT&CK** — detection cards for common techniques.
- **Checklists** — triage checklists.

## Notes

Your own working notes, under **Notes** in the Blue Team menu.

## Shield

**Shield** is a read-only reference: install and run commands, with copy buttons, for a separate scanner that you run on your own machine. Nothing executes inside Oyster.