Chapter 11: Documentation
If it has not been clear thus far in this book, communication is an exceedingly important concept to understand at this point. Communication is key at each step of a threat hunt. If any member of the team and organization fails to effectively communicate, then they can cause the entire team and organization to incur a penalty, leading to a potential threat-hunt failure.
Communication in the short term can be accomplished in many different forms. However, long-term communication—for example, an understanding that will last more than an hour—needs to be recorded for future reference. Take to heart the following rule: If it isn't written down, then there is no evidence that it did or did not occur. This applies to everyone: ...
Get The Foundations of Threat Hunting now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
