Before we dive into more details about the process itself, it is important to be aware of some of the terminology that is used, and also what the final goal is when using IR as part of enhancing your security posture. Why is it important? Let's use a fictitious company to illustrate why this is important.
The following diagram has a timeline of events(2) that leads the help desk to escalate the issue and start the incident response process:
The following table has some considerations about each step in this scenario:
|
Step |
Description |
Security considerations |
|
1 |
While the diagram says that ... |
