what incident response REALLY looks like

Incident response looks very different when you’re dealing with a real organisation, real attackers and a very stressed client.

Renzon shares his actual experience on what Incident Response actually looks and feels like. What 'scoping an incident' means and understanding the environment to staying calm when everyone around you is panicking.

We shares some crazy war stories, including discovering attackers who had been inside environments for years, investigating two different APT groups targeting the same organisation, and negotiating with a threat actor while he was supposed to be on holiday.

We also talk about why incident response isn’t just about tools and logs.

Sometimes the most important skill is being the person who can calmly tell everyone what happens next.