The Importance of Pen Tests in Incident Response

I wasn't really seeing many pen testers doing as part of post exploitation. We were working so many ransomware cases where the attackers were going and accessing and deleting backups. You know, we're actually starting to look at going down more of that scenario based testing. It could be like a teacher and teaching this. That's so important because forget about the pen testing,. Anyone in law enforcement that's working this, being able to actually figure out how to how to attack a system means you have to understanding how to get a proper vector.