ABSTRACT

Table 8.1 summarises the routine incident response process composed of three high-level tasks, each of which is performed by specific agents from across the C2 network. These agents make use of several artefacts that support them in completing their tasks and mediate their communications with one another.