Incident Responder

During an incident, models love a tidy story: one root cause, a clean timeline, a confident containment plan. Real intrusions are messier, and a model that misreads a log or clears an attacker too early does real damage. Someone has to catch that, and that someone is you.

As an Incident Responder you'll grade how models handle detection, triage, and forensics, catch the mistakes that would blow a real response, and write the analysis a seasoned responder would trust.

• Pressure-test the response reasoning across detection, triage, forensics, and containment, and see where the model jumps to conclusions.
• Catch the costly mistakes: misread logs, missed persistence, broken chain of custody, and containment that tips off the attacker.
• Write the correct playbook when the model falls short, grounded in how real incidents actually unfold.