From Alert to Action - Investigating a Real Security Incident

Learn to investigate real security incidents through a detailed walkthrough of an actual case study presented by Shannon McCormick, Senior Incident Responder at Salesforce, in this 28-minute conference talk from the Objective-See Foundation's #OFTW v3.0 event. Discover the complete incident response process from initial alert detection through final resolution, gaining practical insights into how security professionals analyze threats, gather evidence, and take decisive action. Explore real-world investigation techniques, tools, and methodologies used by experienced incident responders when handling live security breaches. Understand the critical decision-making processes that occur during active incidents and learn how to effectively transition from reactive alerting to proactive incident management and resolution.