top of page
Hi, I’m Mohd Mudassir.
I am a Security Analyst & Incident Responder.
“A blue team at its core is an organization focused on defensive information security posture, analysis, investigation, and response.”
Prepration
Preparation is the defender’s chance to get ahead of the attacker by deploying new detection systems, creating and updating signatures, and understand‐ ing baseline system and network activity. This is a combination of network security architecture and security operations.
Identification or Detection
The Detection of potential incident is a complex endeavor.Depending on the size of the organization, they may have over 100 million separate events perday.
Analysis
In this Step Collecting evidence from system such as running memory,log files,network connection and running software processes.
bottom of page