Summary
If you leave this chapter with nothing else, remember that communication is critical at each and every step of a threat hunt. This is not just for the team lead but for all participants. All team members (and stakeholders) must be mindful of how they are communicating verbally, non-verbally, in written form, and visually to others. Certain unintentional and minor communication complications could quickly kill any long-term standing that the team has within the organization.
Team communication can be straightforward and open. The team lead must ensure to establish the standard for how this will be carried out and then ensure the personnel follows that expectation. Operator notes are a simple and highly effective way of ensuring each analyst keeps track of what they are doing. This will keep analysts on track and enable them to provide more detailed feedback during debriefs.
When communicating with business owners, stick to the facts. If an opinion or assumption must be...