Question for those who work in IR

Hello,

Not sure if this is the best sub for this question but seems like it might, let me know if there’s a better one.

I work for an MSP as a junior network engineer, mostly working on firewalls. Anyways, I just helped out with my second ransomware incident today and had a question in the process that differed between the two I’ve been apart of.

First one, I was connected to the customers network when the incident started, started …

computerforensics engineer firewalls hello incident msp network network engineer process question ransomware work working