When you are the SOC: The first 60 minutes of incident response
George Ferres
Thu
15 Oct
10:55 am
-
11:35 am
Think Tank 1
Running Secure Operations
Incident Response, Crisis Coordination and Recovery
Solo IT responders without a SOC need a simple confirm, contain, preserve, communicate loop to manage the first hour of an incident without destroying evidence.
