Quiksilver_RunBook

Modified on Mon, 15 Dec, 2025 at 11:58 PM


GENERAL INFORMATION

Instructions: Complete this section during onboarding using the client intake form, contract, or kickoff meeting. Confirm contract dates and contact info with the Contracts or Account Management team. Address fields should reflect the physical locations being monitored or supported. Use full legal names and confirmed contact details.

Item

Content

Client Name

Quiksilver

Client Alias

QSS

Contract Start


N/A

Contract End


N/A

Billing Address

426 Paseo Reyes, St. Augustine Florida. 32095

Physical Address 1

426 Paseo Reyes, St. Augustine Florida. 32095

Physical Address 2

N/A

Physical Address 3

N/A

Physical Address 4

N/A

Website

quantss.com

Primary Phone

904.686.6100

Time Zone

FL(UTC-4)

Other


 

POINTS OF CONTACT / ESCALATION 

Instructions: List escalation contacts in the order they should be contacted in the event of an incident. Confirm preferred contact methods (e.g., phone, email, messaging apps), time zones, and backup coverage. Ensure both technical and billing contacts are included.

Escalation Point

Name

Role / Position

Phone

Email

Notes

Primary

Dawn Wilson

 

MSP Lead


support@bluefintech.com

dawn@bluefintech.com,

 Primary is the support email and CC Dawn

Secondary

Edward Raha

 Founder

 904.686.6100

eraha@quantss.com

Tertiary


 

 

 

 

Billing

Edward Raha

 Founder

 904.686.6100 

 eraha@quantss.com

 

Emergency

 

 

 

 

 

Other

 Kevin Bento

 VP Operations

 1.222.333.4444

kbento@netstream.biz

hansel.infante@icloud.com

 

 

SCOPE OF SERVICES

Instructions: Match all services listed to the contract, work order, or statement of work (SOW). For each supported item, specify the current status (e.g., managed, monitored, not in use) and confirm with the project lead if there’s any uncertainty. Provide brief examples where appropriate. Add additional rows as necessary for services provided but not listed.     

Service

Supported

MDR (CrowdStrike)

Yes - 15 endpoints contracted to February 26, 2027



XDR (Wazuh) - Endpoints

Yes

XDR (Wazuh) - Cloud

Yes

XDR (Wazuh) - Network

No

XDR (Wazuh) - Other

No

Phishing Protection / Triage 

No

MSP

No 

Security Assessment

We are separately contracted for security assessments.

Impersonation Monitoring

No

Dark Web Monitoring

No

Policy

No

Incident Response

No

Other

We maintain a syslog server for the client to relay their firewall data. 



SPECIAL INSTRUCTIONS

Instructions: Use this section to record patching and maintenance windows, exceptions to monitoring, and critical systems that require extra attention. If a corresponding Freshdesk ticket exists for an item, reference it explicitly (e.g., “See Ticket #1234”). Also reference any attached documentation (e.g., network diagrams, SOPs, or escalation paths).

Activity

Description

Patching Windows

Patching typically occurs at the end of each month following testing.Victoria patches workstations and Netstream patches servers. Please refer to the Endpoint and Network Device Summary below.

Maintenance Windows

Exceptions to Monitoring

 qss-loki-managed-syslog this agent is a syslog server we manage, and it’s part of the QSS group because it collects their firewall data. If there are any vulnerabilities on this machine, we will handle them—not QSS. So, don’t include this host in QSS vulnerability reports; it will be covered in the Loki reports instead.

Critical Systems to Monitor


Other

 

 



SECURITY TOOLS & AGENTS

Instructions: List all known security tools and endpoint agents in use, including those hosted or managed by Loki Labs, Catalisto, the client, or third-party vendors. Specify the function of each tool, who manages or hosts it, and any deployment or integration notes. Add additional rows as necessary.  

Tool / Agent

Function

Hosted By

Notes

CrowdStrike Falcon

EDR

Loki 


Wazuh Agent

XDR

Loki


Defender

Endpoint Protection

Client


Firewalls-

Fortigate

Fortigate

We maintain/ tune this

-

 

 


-

 

 


 

 

 


 

 

 




ASSET INVENTORY

Instructions: Use this table if there are 20 or fewer devices. For environments with more than 20, request and attach a current asset inventory and include a reference link or filename here. Be sure to include all monitored systems, especially those with critical roles. Add additional rows as necessary.  

Hostname

Device Type

OS

IP Address

Notes

qss-QSS-CONFERENCE

Workstation

Windows 11 Pro 

10.33.13.60


qss-QSS-TRADING-2

Workstation

Windows 10 Pro

10.33.13.51


qss-QSS-MARKETING

Domain Controller

Windows 11 Pro 

10.33.13.26


qss-QSS-RESEARCH

Domain Controller

Windows 11 Pro 

10.33.13.67

qss-QSS-ADMINISTRAT

Workstation

Windows 11 Pro

 10.33.13.114

 

qss-QSS-DC1

Server

Windows Server 2022 

172.16.100.181

 

qss-QSS-DC2

Server

Windows Server 2022

172.16.100.182

 

qss-QSS-REMOTE

Workstation

Windows Server 2022

 172.16.100.183

 

qss-QSS-SQL3

Server

Windows Server 2022

172.16.100.184

 

qss-loki-managed-syslog

Server

Ubuntu 24.04.2 LTS

10.1.32.13


 

qss-DESKTOP-FTPGCA9

Workstation

Windows 10 Pro 

10.33.13.134

 

 qss-LL-KW-LAPTOP

Workstation

Windows 11 Pro

10.100.0.2

 

qss-HOME-ER

Workstation

Windows 10 Pro

 10.33.14.161


 



ADDITIONAL NOTES

Instructions: Record any unusual client requests, reporting requirements, compliance frameworks, or operational risks. 

Additional Notes

Loki tunes the clients FortiGate firewalls on a quarterly basis…

 - 

 -






UPDATE HISTORY

Instructions: Track who updated the runbook, when, and what was changed. Keeps audit history clean.

Date

Updated By

Changes Made

Notes

2025-07-09

Beauty Kone

Document Created

 

2025-08-19

Kyle Whitney

Asset SOP added

 Asset SOP in Progress

2025-12-15Claudia IannazzoUpdated security appliances


Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article