How to Build Detection and Response Phases

Jared: Having a written playbook of things that you want the investigator to go look at for the alert but also um it kind of helps engage their brain because again a lot of the things that we hear inside of the industry is oh it takes time if you haven't seen this before well some of that can be kickstarted through that documentation and step phase.