Incident response is about people, relationships and leveraging those relationships into the incident response workflow (processes and security instrumentation) This all plays a part in effectively containing and eradicating a determined adversary from the organizations network environment. Brad Garnett is a seasoned incident responder and IR business leader at Cisco Talos Incident Response (CTIR) He shares a recent CTIR engagement that shows how we can work together with an organization’s IR and IT teams to quickly contain and remediate a threat. The customer CISO received a phone call from my organization when the company was going through a merger and acquisition.”]
Source: https://blog.talosintelligence.com/2021/05/ctir-case-study.html