All Categories: cybersecurity(24) sc-100(22) azure(16) microsoft(14) certification(11) productivity(6) linux(5) edgevolt labs(3) shell(3) iot(2) the drive on 17(2) roku(2) zero trust(2) marvel move(2) sendmail(2) marvel(2) packet capture(1) jks(1) pfx(1) michael hyatt(1) budgie(1) key vault(1) security workflows(1) nist(1) microsoft graph(1) verified id(1) mcsb(1) workload security(1) azure blueprints(1) azure landing zone(1) stix(1) taxii(1) data residency(1) azure monitor(1) conditional access(1) cwpp(1) cpsm(1) guardians of the galaxy(1) movie reviews(1) monster hunter now(1) fitness(1) logitech(1) java(1) miscellaneous(1) music(1) networking(1) cooking(1) metasploit(1) recipes(1) movies(1) soccer(1) authentication(1) playlist(1) ubuntu(1) traffic on 17(1) edgevolt radio(1) tcpdump(1) home

[SC-100] Simplified explanation of technical response to incidents

August 05, 2023

While perusing a study guide for SC-100 exam, I came across a really nice and succinct explanation for technical response. It's one of my favorite quotes now:

(...) there are two key goals that every incident response should aim to address from a technical perspective. The first is identifying the scope of the attack (...) . . .