Chapter 02 of 07 · Digital Forensics & Incident Response

The First Hour

Is it still happening, what is exposed, and what comes down before anything else.

One-sided — Triage is reading and deciding, not attacking. The attack that caused the morning is taught in web security and the attacker's playbook; this chapter starts after it.