Rethinking Incident Response — From PICERL to DAIR (Expanded Edition): https://medium.com/@cyberengage.org/rethinking-incident-response-from-picerl-to-dair-expanded-edition-7d309f00d43a

#incidentresponse #picerl #dair

Finally managed do watch @hacks4pancakes excellent #ICS incidence response table top exercise (#TTX) talk
https://youtu.be/XobogsaxcUY

And afterwards I was more and more desperately searching for the P-CURL incidence response life cycle (and I wondered what the U was)

Took quite some time until I found it's #PICERL
😅 (Preparation - Identification - Containment - Eradication - Recovery - Lessons Learned)