Incident ResponseThe first hour of an incident: six steps before the responders arrive
What to do, and what not to touch, in the first hour after you notice an attack. A short checklist for the people who are on site.
Blog
Notes from the work, not from the brochure.
Short articles on incident response, bug bounty, data breaches and threat intelligence: what we see in our own work and what you can apply the same day.
4 articles
RSS feedTopic
Latest article
Incident Response
Bug BountyBug bounty or penetration test: which one comes first
Both find vulnerabilities, but they answer different questions. How to choose, in what order to run them and how to tell that you are ready for a bug bounty.
Data BreachYour password appeared in a data breach: what happens next
How a leaked password travels from an old forum to your corporate mail, why changing it in one place is not enough, and what a person and a company should do.
Threat IntelligenceThreat intelligence that acts: from an indicator to a blocked attack
A feed with a million indicators is not intelligence. What the three levels of threat intelligence are, why indicators age in days and how to turn them into action.
Telegram · RSS
New articles arrive in Telegram first
We publish rarely and only what we have checked in our own work.