Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
The session after an incident is closed where the team records what happened, what worked, and what changes. Done properly it is blameless: the goal is fixing the system that let the attack succeed, not finding a person to punish.
No lessons reference this term yet.