Operations Runbook

Back to Home Lab Documentation Hub

Daily Tasks

1. Confirm core services are up and alert queues are clear.
2. Review overnight security events and anomalous traffic.
3. Verify domain controller health and DNS responsiveness.

Weekly Tasks

1. Apply non-breaking patch updates to test hosts.
2. Review backup job status and sample restore logs.
3. Check firewall policy drift and unused rule cleanup candidates.

Monthly Tasks

1. Validate disaster recovery checkpoints and recovery notes.
2. Run privilege review on high-risk groups/accounts.
3. Update change log and architecture notes with completed improvements.

Incident Triage Flow

• Detect: capture alert context from Zabbix/Wazuh/Graylog.
• Contain: isolate affected host/segment where required.
• Remediate: apply fix and verify monitoring returns to baseline.
• Document: add timeline, root cause, and corrective action.