Incident response is what happens once a security incident is under way: containing it, working out what happened and getting back to normal operation. These notes cover the response process and the threat intelligence and analysis that help explain how attackers operate. The posts in this category are listed below.
Threat Intelligence is information about threats, threat actors and indicators of compromise that assist cybersecurity teams and individuals prepare against attacks, understand trends and what tactics threat actors used or are currently using
It's only a matter of time before you are involved with a cybersecurity incident. That's not fear-mongering, that's the truth. Businesses and organisations that respect this will be at the forefront of planning to prevent it, but even the most prepared are fallible and adversaries are evolving on a day-to-day basis.