Incident response
7 min read
What is ransomware incident response? A step-by-step playbookHow to respond to a ransomware incident: immediate containment steps, your three recovery options, and notification obligations, from Expel's SOC.
7 min read
Incident response teamWho's on an incident response team? Learn the core roles, how to build a RACI matrix, how triage sets your response tier, and what to outsource.
6 min read
Incident response planUnderstand the six components of an incident response plan, and why writing for an auditor isn't the same as writing for function.
6 min read
Threat hunting vs. incident response: Proactive and reactive, side-by-sideThreat hunting is proactive. Incident response is reactive. Learn how the two differ and how hunting findings become incident response cases.
5 min read
Remediation vs. mitigation: What’s the difference in cybersecurity?Mitigation reduces risk temporarily. Remediation removes the root cause. Learn the difference, and when incident responders should use each one.
5 min read
What is incident response?Incident response is how teams detect, contain, and recover from a cyber incident. Learn the six-step lifecycle and how IR differs from MDR.