Incident Response
Incident Response | News, how-tos, features, reviews, and videos
Evolving cyberattacks, alert fatigue creating DFIR burnout, regulatory risk
Digital forensics and incident response teams face increasing workloads amid evolving cyberattacks, recruiting and hiring challenges, and a lack of effective automation.
Plan now to avoid a communications failure after a cyberattack
CISOs should take the lead to develop a post-cyberattack communications plan that accurately informs stakeholders and instills confidence in their organizations' response.
Will your incident response team fight or freeze when a cyberattack hits?
CISOs train their teams to fight hackers but often overlook the human tendency to freeze up during a crisis. Planning for the psychology of incident response can help prevent a team from seizing up at the wrong moment.
ServiceNow to detect open source security vulnerabilities with Snyk integration
ServiceNow Vulnerability Response users will now have access to Snyk’s product that scans open source code during the development process.
MTTR “not a viable metric” for complex software system reliability and security
Verica Open Incident Database Report suggests mean time to resolve should be retired and replaced with other metrics more appropriate for software systems and networks.
EU Council adopts NIS2 directive to harmonize cybersecurity across member states
The NIS2 directive replaces NIS as EU Council seeks to improve resilience and incident response capacities in the EU.
CISA launches incident, ransomware reporting rulemaking RFI
The U.S. Cybersecurity and Infrastructure Security Agency seeks input on a common set of cybersecurity incident reporting regulations.
![Tech Spotlight > Cloud [CSO] > Conceptual image of laptop users with cloud security overlay.](https://images.idgesg.net/images/idge/imported/imageapi/2022/05/16/16/spot_cloud_3x2_03_cso_laptop_users_with_ccloud_security_overlay__by_metamorworks_gettyimages-1132912672_b-100891925-small.3x2-100928038-small.3x2.jpg?auto=webp&quality=85,70)
Palo Alto debuts Unit 42 team for managed detection and response
Live expert service builds on Palo Alto’s Cortex extended detection and response (XDR) platform provide, offering a managed detection and response (MDR) team for more personalized cybersecurity management and incident response.
Best practices for recovering a Microsoft network after an incident
Follow this advice to minimize stress when recovering credentials, systems and settings after a ransomware or other cyberattack.
![Team member extends all hands in for a huddle. [unity / teamwork / trust / diversity / inclusion]](https://images.idgesg.net/images/idge/imported/imageapi/2022/03/14/11/business_team_puts_all_hands_in_for_a_huddle_for_unity_teamwork_team_spirit_trust_diversity_inclusion_by_prostock-studio_gettyimages-1201215883_2400x1600-100859605-small.3x2-100921789-small.3x2.jpg?auto=webp&quality=85,70)
Sophos unifies threat analysis and response units into X-Ops team
Cybersecurity vendor Sophos reorganized three prominent organizational teams into a single new entity, for more efficient responses to modern threats.
How to conduct a tabletop exercise
Testing your security policies and procedures in real-life scenarios can help you improve your security posture—if you implement the lessons learned.
![A hand reaches to activate controls marked with gear icons [ process / update / fix / automate ]](https://images.idgesg.net/images/article/2020/08/hand_reaches_to_activate_controls_with_gear_icons_process_development_update_fix_automate_by_putilich_gettyimages-1220461550_2400x1600-100854509-small.3x2.jpg?auto=webp&quality=85,70){kind=icon}
New Flashpoint offering automates incident response workflows
Low-code platform enables security teams to build security workflows with drop-and-drag ease.
How Code42 automates insider risk response
When insiders exhibit risky behaviors, good-natured bots reach out to provide support in this CSO50 award-winning project.
5 things security pros want from XDR platforms
New research shows that while extended detection and response (XDR) remains a nebulous topic, security pros know what they want from an XDR platform.
Cybereason launches DFIR solution to automate incident response
Vendor says new solution takes forensic-driven approach to incident response that extends deeper value to defenders.
Ransomware, endpoint risks are top concerns for DFIR professionals
Digital forensics incident responders worry most about ransomware, but risks associated with remote work are also top of mind.
ServiceNow adds new features to Major Security Incident Management Workspace
New features allow users to add their own report templates and format and configure reports based on requirements in MSIM platform designed to help teams track and resolve critical security incidents.
New Magnet Forensics app automates, coordinates cybersecurity response
Magnet's new application, Automate Enterprise, is designed to speed up investigation and response to cybersecurity incidents by automating basic and repetitive manual tasks, and integrating detection and post-incident tools including...