Tag archive
Four CRITICAL alerts piled up in a single day. A 504, a Prisma P2028, an admin 500, and 'DATABASE service down.' I opened the RDS metrics first: 21 st
The US cyber agency admitted it built its incident playbook during the incident. Here's the cheap, free-tier way a Sri Lankan team can avoid that.
Agentic AI for High-Stakes Incident Response: Lessons from Aerospace Failures You can't...
Every day in staging, the same Google Play 404 alert fired. Killing the source would have made it quiet - but quiet and fixed turned out to be two dif
Configuration standards emergency changes have one thing in common across every organization we've...
Every deploy dropped a Prisma P2028 error into Sentry. I went in to fix the shutdown order and found something bigger: NestJS's enableShutdownHooks an
A production-ready incident management runbook template for SRE and DevOps teams. Covers severity levels, roles, response lifecycle, automation, and a postmortem template you can copy today.
Introduction: The Security Architect-SOC Disconnect After 17 years in...
Originally published at norvik.tech Introduction Explore the critical lessons from...
A practical, tool-driven digital forensics field guide that explains what to do, why to do it, which tools to use, how to use them, and what evidence to preserve across computers, mobile phones, RAM, storage media, and game consoles.
The point in an incident where an AI assistant should be cheapest and fastest — deep into a long,...
Agents are moving from code generation into incident response. That makes read-only defaults, approval gates, evidence, and rollback discipline more important than the demo.