Best podcast episodes on incident response
What happens after the breach: real response stories, remediation, cloud and Kubernetes investigations, tabletop exercises, and leading a team through the worst week of the year.
11 episodes from 11 shows. Dates and lengths are from each show's own feed.
- 01
· 51 min · Beginner
Joe Tidy on the Finnish therapy-records breach and the extortion of patients; a stark lesson in breach impact.
- 02
Threat Vector by Palo Alto Networks
Inside 750 Breaches with Unit 42
· 42 min · Beginner
Patterns from hundreds of IR engagements: where breaches start and what slowed responders.
- 03
· 33 min · Practitioner
The LastPass security chief on leading a team through a major incident and rebuilding afterwards.
- 04
RSA Breach: The Untold Story, Part 1
· 25 min · Practitioner
How RSA found and handled the theft of SecurID secrets, told by people involved.
- 05
The Defender's Advantage Podcast
The Art of Remediation in Incident Response
· 41 min · Practitioner
Eviction and remediation planning, the IR phase most often done badly.
- 06
Microsoft Threat Intelligence Podcast
From Identity Compromise to AI Defense: Inside Modern Incident Response
· 51 min · Practitioner
How identity compromise drives today's IR caseload, from Microsoft's responders.
- 07
Cloud Security Podcast by Google
EP248 Cloud IR Tabletop Wins: How to Stop Playing Security Theater and Start Practicing
· 33 min · Practitioner
Google Cloud's IR director on running tabletops that change behavior instead of ticking a box.
- 08
Microsoft 365 incident response
· 55 min · Practitioner
A working M365 responder on how real tenant investigations unfold and which logs decide them.
- 09
Blueprint: Build the Best in Cyber Defense
From Clues to Containment - Unraveling A Gift Card Fraud Scheme with Mark Jeanmougin
· 36 min · Practitioner
A full investigation story, from first clue to containment, told by the analyst who worked it.
- 10
Incident Response of Kubernetes and how to Automate Containment
· 52 min · Practitioner
How to respond inside a Kubernetes cluster you cannot reach directly, and what to automate first.
- 11
Leading Cybersecurity Incidents as Incident Commander and Responding to a Cyber Crisis
· 37 min · Practitioner
Chris Cochran on the incident commander role, drawing on NSA, Cyber Command and Netflix work.