Articles on Incident Response

• Incident Response Why Organizations Don't Prepare for Information Security Incidents
  Organizations fail to prepare for security incidents not because they're unaware of threats, but because they believe they personally won't be attacked and underestimate the disruptive effects of...
• Cheat Sheets Cybersecurity Cheat Sheets
  As much as we try to be proactive about cybersecurity, writing, or career planning, we get distracted, or procrastinate. These cheat sheets and checklists are designed to assist professionals in...
• Training Free Recorded Malware Forensics and Analysis Webcasts
• Threat Intelligence When Indicators of Compromise (IOCs) Entered the Mainstream Enterprise
  Indicators of Compromise (IOCs) are custom, incident-specific signatures that organizations use to detect attacker artifacts. Mandiant popularized the term around 2007, and by 2013 the concept gained...
• Malware Who Was the First to Use the Term Exfiltration in Cybersecurity?
  The term "exfiltration" in cybersecurity—referring to data leaving a compromised network—appears to originate from military terminology about withdrawing troops from dangerous positions. The earliest...
• Incident Response Some Facts and Conjecture About the VeriSign Data Breach
  VeriSign's 2011 SEC filing disclosed a 2010 breach where information was exfiltrated from compromised corporate systems. The APT-style attack characteristics and inability to assess future misuse of...