Technique
technique:incident_response
Also: IR, incident handling, incident response team
The operational process of investigating and responding to a compromise, including forensic analysis, monitoring, and remediation.
The operational process of investigating and responding to a compromise, including forensic analysis, monitoring, and remediation.
“a follow incident response engagement”
“why we don’t immediately remediate”
Investigation and response work performed after suspected compromise of an industrial environment.
“go do an incident response with them”
“what makes it really interesting from an IR story”
Security-response activity involving triage, analysis of released exploits, forensic investigation, and detection of compromise.
“This was an incident response; the client was hit with something serious”
“this is a game-changer for incident response”
The process of investigating, containing, and managing security incidents.
“that’s the thing that makes a good incident handler”
Process of identifying, managing, communicating about, and resolving serious security or operational incidents.
“I was the lead of the incident responders.”
“I’m the head of incident response.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Andrew | Explicit | 11 |
| incoming | USES | Robert M. Lee | Explicit | 22 |
| incoming | USES | Tanya Janca | Explicit | 165 |
Andrew USES incident response
Andrew works on a team that performs incident response and participates in incident-response engagements.
Explicit Confidence 97% · Jack Rhysider EP 11 Details
“Andrew works on a team that does incident response.”
“We spun it up to – the company that I work for spun it up to a follow incident response engagement.”
Robert M. Lee USES incident response
Robert was called to conduct incident response for a client operating wind turbines.
Explicit Confidence 99% · Robert M. Lee EP 22 Details
“They’re reaching out and calling us to go do an incident response with them”
Tanya Janca USES incident response
Tanya led incident responders and managed serious security incidents.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“So, I was the lead of the incident responders.”
“I’m the head of incident response.”