10SOC: Incident Response & Containment
Build the timeline, find persistence and exfiltration, then decide the containment order that preserves evidence.
0 / 0
root@techbiz-lab:~#
Simulated environment — no real systems are contacted. Only ever test systems you own or are authorised in writing to test.