Cook Book, Notes and Shield
Cook Book
Section titled “Cook Book”A reference library that works with SOC Copilot. Open Cook Book under Blue Team. It has four sections:
- Playbooks — the playbook templates SOC Copilot uses. Browse them, and attach one to a case.
- Shortcuts — curated commands and queries you can copy.
- ATT&CK — detection cards for common techniques.
- Checklists — triage checklists.
Your own working notes, under Notes in the Blue Team menu.
Shield
Section titled “Shield”Shield is a read-only reference: install and run commands, with copy buttons, for a separate scanner that you run on your own machine. Nothing executes inside Oyster.
Oyster is made by Red Orca, alongside Dolphin and Shark. One account for all three.