Prioritizing Endpoints Helps to Focus Incident Response

Prioritizing Endpoints Helps to Focus Incident Response

As part of a responding flyaway team, it’s probably common for you to arrive at your client’s offices, only to be pointed to a set of boxes to start analyzing. The client may tell you that they did some of their own digging around and identified the computers for you...
Understanding Your Client’s “Normal”

Understanding Your Client’s “Normal”

Detecting an incident means one of two things. You have to see either a known problem — such as high-risk malware infecting one or more client endpoints — or something that is suspicious. But how do you know if suspicious activity is good or bad unless you...