Cyber Security Researcher Interview Questions and Answers

IOC stands for Indicator of Compromise. DFIR steps include preparation, identification, containment, eradication, recovery, and lessons learned.

• IOC is a piece of information that indicates a system has been compromised, such as IP addresses, file hashes, or URLs.

• DFIR steps: Preparation involves creating an incident response plan. Identification involves detecting and analyzing the incident. Containment limits the impact of the incident. Eradication involves removing the threa...read more