Dossier
incident investigation
Coverage of incident investigation in the Nexus archive.
- Surviving the Mythos Era: Richard Bejtlich on the Case for NDR
The article discusses how security operations teams face challenges in answering fundamental questions during incident investigations despite having access to telemetry. It argues that teams must move beyond alerts to effectively investigate and understand security incidents.