4 ms·

They do the IR retainer work for companies that are serious about security with real threats. In other words, it is the company that detected a breach of its o

They do the IR retainer work for companies that are serious about security with real threats. In other words, it is the company that detected a breach of its own systems via dogfooding, that turned out to be the only detection that occurred of a breach of the entire US govt more or less - Solarwinds. Mandiant got the jump on every US govt agency in detecting arguably the largest espionage event of the digital age.

hexo 5y ago
What is IR?
- dogman144 5y ago
  (security) incident response. most companies have in-house security teams to do a portion or a lot of the IR process. If a serious breach occurs, a security team usually will call in a specialized team of consultants from an IR firm like Mandiant.