This guide provides a structured workflow for dealing with cybersecurity incidents. Aligned with established frameworks from NIST and CISA, it offers clear, actionable steps for each phase of incident response. The workflow facilitates the documentation, analysis, and learning from each event, utilizing Belkasoft tools for evidence collection, forensic analysis, and reporting. It also offers an adaptable template that security teams can customise according to their infrastructure and specific incident types.