Forensic readiness — what I learned from a friend's incident
A friend at a small consultancy had a serious compromise this month. Helping them with the response taught me three lessons about forensic readiness that I have not been applying to my own infrastructure. Time to fix that.