Improvised Incident Response

Hey everyone, I've been getting a few questions about the Incident Response page from our GhostNet guide and decided I might as well describe the thought process a bit more clearly. I feel really hesitant to discuss such ideas that are not cemented in stone, because just making things up as we go along is not generally a good idea. However, in the interest of expediency, here's what we've got so far. It's not perfect, but it gives people something to work from when some national event oc...