“Incident response”

安全事件响应深度专业技能（v3.0高级版）：NIST 800-61r3六阶段响应框架、攻防视角入侵链还原与MITRE ATT&CK映射、Volatility 3/KAPE内存与主机取证深度、无文件攻击追查、云与容器(K8s)事件响应专项、勒索软件专项响应流程、假设驱动威胁猎捕、AI辅助应急响应(LLM日志分析/事件聚…

Manage active production incidents through detection, triage, mitigation, communication, and resolution with structured roles and decision-making.

Build AI-focused SRE incident response practices for LLM outages, degraded quality, runaway cost events, and safety regressions.

Use to coordinate a live production incident or outage — triage severity, decide which guards to dispatch in what order, keep one timeline.

Guide for handling security incidents and system outages.

Usar ante un incidente en producción: triaje, mitigación, causa raíz y postmortem.

Handles a production incident and writes the postmortem.

Incident response runbook — detection through post-mortem for production issues with severity-based response teams.

Autonomous SRE investigation for latency spikes, 5xx errors, memory leaks, and service outages.

Designs and documents structured incident response playbooks that define step-by-step procedures for specific incident types aligned with NIST SP 800-61r3 and…

Designs and documents structured incident response playbooks with step-by-step procedures per incident type, decision trees, escalation criteria, RACI…

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource…

Builds real-time incident response dashboards in Splunk, Elastic, or Grafana to provide SOC analysts and leadership with situational awareness during active…

Respond to security incidents in AWS, Azure, and GCP via identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP Audit…

Respond to phishing incidents by analyzing reported emails, extracting indicators, sandboxing URLs/attachments, assessing credential compromise, quarantining…

Respond to malware infections across enterprise endpoints by identifying the malware family, determining infection vectors, assessing spread, and executing…

Data breach incident response with ENISA severity scoring, notification timelines, and compliance tracking.

Production incident response.

Set up alerting rules, configure on-call rotations, and manage incident response workflows.

Elite incident response and legal compliance guidance for data breaches under GDPR Articles 33 & 34.

Reads your incident-response runbook and says which of the three Article 23 clocks it gets wrong

Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations.

Expert DevOps troubleshooter specializing in rapid incident response, advanced debugging, and modern observability.

Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline…