Watch the stream
Incidents are a bad time to try to figure out what you don't know. This talk will highlight the most important things IT, Security and IR teams should know before an incident happens.
The first major incident response I was involved in was a nightmare. Why? Because I didn’t know what we didn’t know. Sixteen years and too many incidents to count later, I’ve come up with a list of 10 (or more) things that I wished I had known then. In this talk, we’ll cover what those 10 things are, some adjacent questions to those, and some war stories to show you why you should care.
This isn't your dad's IR plan....