Digital Forensics and Incident Response? (DFIR) is the cybersecurity field that defines the process and the best practices to follow in order to deal with a cyber attack or a security breach.

#DFIR includes the initial response and containment of the attack, but also the plan the cyber investigator follows to gather evidence and identify what happened and how to prevent these issues.

Join Miguel, a security expert watching a video about a cyber detective investigating a kubernetes breach, and find out what the culprit was!

If you want to learn more about DFIR, check out our blogs:
https://sysdig.com/blog/guide-kubernetes-forensics-dfir/
https://sysdig.com/blog/triaging-malicious-docker-container/