Johannes Stillig
Writing
About
Switch to
dark
light
mode
Tagged “incident-response”
01
The attacker can prove what they took. You can only prove what you logged.
29 Jul 2026 · 11 min