Talos Takes Ep. #54: Incident response is just as much about the relationships as anything else
Summary: In this episode of Talos Takes, Brad Garnett, who leads Cisco Talos Incident Response, discusses a recent engagement in which his team stopped a customer from being infected with ransomware at what the source describes as the worst possible time. Garnett says the relationships CTIR had built ahead of time mattered as much as the technical work of malware removal.
What you should know: The ransomware was stopped, but the source credits pre-existing relationships as much as the malware removal itself, which puts the weight on contacts established before an incident rather than on tools brought in during one.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026