Thái | Hacker | Kỹ sư tin tặc • 2396 implied HN points • 22 Mar 24
- Investigating incidents involves more than just technical tools and techniques; 80% success comes from logical reasoning and keeping calm.
- Investigating an incident requires thinking about the 'why' before deciding on the 'how'; it's about determining the investigative direction.
- Confirmation bias, the tendency to seek information that supports preconceptions, can hinder incident investigations; focus on evidence-based conclusions instead.