CYBEROLE / 100 QUESTIONS
Incident response
in the real world.
Decide what to isolate, preserve, investigate and restore when an attack is under way.
What you will practise
01Ransomware
02Containment
03Evidence
04Compromised accounts
05Recovery