@DebugPrivilege
i really feel like specific response scenarios for IR are not blogged enough
Ive tried to point newer IR people to documentation on what to do and I basically just end up pulling excerpts from a few books as examples
more stuff like this!