Solutions / Attacks and risk

It's Friday night and something looks wrong on a server

Is it real? Who do we call? What must nobody touch? Ask your incident response engineer and get a plan.

Know what to check first and who to call
Keep all the evidence on one timeline
Block the source IP and isolate the host in prevention mode

Tired of tuning your WAF?Your risk register is a spreadsheet nobody opens What's going to hurt you next quarter?