COPS (Collaborative Open Playbook Standard) is a repository containing schema definitions for DFIR (Digital Forensics Incident Response) playbooks based on YAML format. The tool provides written guidance for identifying, containing, eradicating, and recovering from cybersecurity incidents through structured playbook definitions. It enables analysts to create, share, and contribute incident response procedures using a standardized language and format. The schema supports both semi-automated and fully automated incident response processes while maintaining visibility into response procedures. COPS facilitates collaborative development of incident response playbooks within the cybersecurity community through its open standard approach.