Chapter 14: Engaging the Response Team and Communicating the Result to Executives
So far, we have learned how to carry out hunts, as well as how to define, document, and measure them. Now we are going to discuss when and how to get the incident response team involved and some of the strategies you can follow to communicate either a breach or the results of your hunting program. Keep in mind that this chapter is introductory and there are specialized publications that you should refer to for more information. Nevertheless, this will give you a clear picture of what to expect!
In this chapter, we're going to cover the following main topics:
- Getting the incident response team involved
- The impact of communication on the success of the threat hunting program
- Testing yourself
