WHY A LOADOUT
New analysts get buried in acronyms: CSF, KEV, SOC 2, CCPA, STRIDE. Blue Team Loadout turns that vocabulary into missions. Every entry has a one-line explanation and a link to the primary source, so you learn from NIST, CISA and the courts, not summaries of summaries.
Primary items are your first objectives. Check them off, earn rank, and clear one mission a week. Pair the guide with a small home lab and in about three months you'll recognize most of what comes up in meetings.
THE PLAYBOOK
Skim the 19 missions so the names in meetings, job postings and audit findings stop being strangers.
Filter to Primary and read the source for each one: the NIST document, the statute, the court opinion.
Stand up Wazuh, Suricata and a vulnerable VM. Practice on your own lab, never on someone else's network.
Follow the Intel Feed, map each incident to the control that would have stopped it, and tell us what the guide is missing.
Recent breaches and exploited vulnerabilities, each mapped to the Field Guide mission behind it.
