Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Six phases that turn a 2am panic into a repeatable process.
The Incident Response Lifecycle
Six phases that turn a 2am panic into a repeatable process.
Detection and Triage
Most alerts are noise. Triage is deciding which one is the fire.
Containment, Eradication, Recovery
Stop the bleeding without torching the evidence that tells you how it started.
Log Analysis for Responders
The specific logs and event IDs that answer who, what, when, and how.
Writing the Incident Report
The document that survives the incident and stops the next one.