Incident Response·Incident Response essentials

Detection

Detect from alerts, reports and anomalies.

Intermediate 10 min read Lesson 2 of 150 Challenge included
What you will be able to do
  • Triage quickly.
  • Confirm scope.
  • Start a timeline.

In plain English

Detect from alerts, reports and anomalies.

  • Triage quickly.
  • Confirm scope.
  • Start a timeline.
detect.txtText
signal -> triage -> confirm -> open incident -> timeline
Your turn

Explain it back

Easy

Answer from memory: What should start immediately?

TEXT · starter
Your answer…
Check your understanding before moving on.
Knowledge checkQuestion 1

What should start immediately?

Select an answer to continue
Study tools

Make it yours.

Keep a private note for this lesson, then turn the key ideas into flashcards you can revisit.

Sign in to save notes and flashcards.Both are private to your account and stay with your progress.
Sign in
Finished reading?

Lock in what you just learned.

Mark this lesson complete to save your place and move one step closer to the certificate.

Next: Containment
Lesson 2 of 150 · 0% of course