https://ku5e.com/tags/incident-response/Recent content in Incident-Response on ku5e | Cybersecurity PortfolioHugo -- 0.162.1en-usFri, 20 Mar 2026 16:29:00 +0000https://ku5e.com/blog/tryhackme-rooms-are-not-as-easy-as-they-feel/Fri, 20 Mar 2026 16:29:00 +0000https://ku5e.com/blog/tryhackme-rooms-are-not-as-easy-as-they-feel/TryHackMe rooms feel easier than real incident response for a specific reason. Understanding that reason is what turns room practice into genuine readiness.https://ku5e.com/blog/the-first-90-days-in-a-security-role-are-not-on-any-cert-exam/Fri, 20 Mar 2026 16:25:00 +0000https://ku5e.com/blog/the-first-90-days-in-a-security-role-are-not-on-any-cert-exam/Earning the cert gets you hired. What happens in the first 90 days is determined by two habits that no certification exam measures — and most candidates do not know which one they default to until it costs them.https://ku5e.com/blog/tryhackme-threat-intel-containment/Sun, 15 Mar 2026 20:59:00 +0000https://ku5e.com/blog/tryhackme-threat-intel-containment/Walkthrough for the TryHackMe Threat Intel & Containment room covering threat intelligence creation, containment strategies, and basic Wireshark packet analysis.https://ku5e.com/blog/tryhackme-tardigrade/Sun, 15 Mar 2026 20:53:00 +0000https://ku5e.com/blog/tryhackme-tardigrade/TryHackMe Tardigrade walkthrough. Five persistence mechanisms on a compromised Linux server, from bashrc alias hijacking to abused system accounts.https://ku5e.com/blog/tryhackme-preparation/Sun, 15 Mar 2026 20:31:00 +0000https://ku5e.com/blog/tryhackme-preparation/TryHackMe walkthrough for the Preparation phase of incident response — building a CSIRT, defining roles, establishing log management pipelines, and configuring Windows Event Log collection before an incident occurs.https://ku5e.com/blog/tryhackme-identification-scoping/Sun, 15 Mar 2026 20:29:00 +0000https://ku5e.com/blog/tryhackme-identification-scoping/TryHackMe walkthrough for Identification and Scoping — determining what systems were affected, mapping phishing indicators, and building the initial picture of a live incident before containment begins.https://ku5e.com/blog/tryhackme-eradication-and-remediation/Sun, 15 Mar 2026 20:22:00 +0000https://ku5e.com/blog/tryhackme-eradication-and-remediation/TryHackMe walkthrough covering eradication and remediation in incident response — removing attacker persistence, patching exploited systems, and restoring operations using MITRE ATT&CK and Jenkins-based tooling.