Too often security and IT professionals believe that once a system is compromised, “security” has failed. In the world of Incident Response, security is just beginning. In this talk Richard Bejtlich will share thoughts on how to make incident response work for the benefit of an intrusion victim. He will talk about key ideas that show an organization can suffer compromise yet not suffer real damage, despite the worst intentions of the adversary.
