We all know that having an Incident Response plan in place helps to minimize the damage caused by a security incident.

We also know that not everyone has one.

I was fortunate to attend fellow handler Lenny Zeltser's talk on "How To Respond To An Unexpected Security Event"  at SANS 2010 in Orlando earlier this month.

If you don't have an IR plan in place, take a look at his presentation, which is available in pdf form on his web site.

Christopher Carboni - Handler On Duty