Three correct ways to close a case
Resolved, false positive and risk accepted are not the same thing. Getting the distinction right determines what your report says …
Blog
Notes from the team
Short answers to questions we meet in the field: reading stealer logs, catching typosquats, managing IOCs, closing cases. Research, operations and product notes.
Product note: finding ownership and closure rationale
A finding without an owner never closes; without a closure rationale it reopens three months later. We made both mandatory …