Specific IR steps

I wanted to ask if there are good resources for more specific IR steps, or how people typically respond to certain scenarios or indicators that they find? I've read plenty of blogs and guides on how certain attacks work, and certain methods attackers may use for persistence, or defense evasion. But what next? I'm aware containment and eradication are the generalized steps to take, but I'm having trouble finding good resources for how to respond to much more …

ask attackers attacks aware blogs containment cybersecurity defense defense evasion evasion find good guides indicators may next people persistence resources respond work