Add more resources Have you looked in Wiz? I don’t have access I’m helping out on-call So who has questions about their ticket? I can set you up with a mentor Tell me more about… I need some coffee We will automate This goes to Level 2 Your goal is to mark yourself as pro Forensic Analysis Does this look malicious? Compromise IOC We need these logs in Splunk Look at the geographical data IR takes priority Did you notify SVIC? This is TOR We need that on the wiki It’s been a meeting heavy day Did you look at session traffic Security event not an IR Do I have access to this? Add more resources Have you looked in Wiz? I don’t have access I’m helping out on-call So who has questions about their ticket? I can set you up with a mentor Tell me more about… I need some coffee We will automate This goes to Level 2 Your goal is to mark yourself as pro Forensic Analysis Does this look malicious? Compromise IOC We need these logs in Splunk Look at the geographical data IR takes priority Did you notify SVIC? This is TOR We need that on the wiki It’s been a meeting heavy day Did you look at session traffic Security event not an IR Do I have access to this?
(Print)
Add more resources
Have you looked in Wiz?
I don’t have access
I’m helping out on-call
So who has questions about their ticket?
I can set you up with a mentor
Tell me more about…
I need some coffee
We will automate
This goes to Level 2
Your goal is to mark yourself as pro
Forensic Analysis
Does this look malicious?
Compromise IOC
We need these logs in Splunk
Look at the geographical data
IR takes priority
Did you notify SVIC?
This is TOR
We need that on the wiki
It’s been a meeting heavy day
Did you look at session traffic
Security event not an IR
Do I have access to this?
