Johannes Stillig
Writing
About
Switch to
dark
light
mode
Tagged “incident-response”
10
Rehearse the question, not the fire
22 Sept 2026 · 7 min
04
The attacker can prove what they took. You can only prove what you logged.
29 Jul 2026 · 11 min