Ravi Sir's Cyber Security Cards › Interview Cards
Scenario: Incomplete alert data is escalated to you – what do you do?
Scenario: Incomplete alert data is escalated to you – what do you do? Work with what you have, list the missing fields, pull related logs yourself, and set a time box. If crown-jewel assets may be involved, escalate upward rather than wait. “I don’t freeze on missing data. I gather more, time-box it
Read card text
What this card says
Short answer
Work with what you have, list the missing fields, pull related logs yourself, and set a time box.
Example
If crown-jewel assets may be involved, escalate upward rather than wait.
Say it in the interview
“I don’t freeze on missing data. I gather more, time-box it, and escalate if it’s serious.”
Why it matters
Waiting for perfect data can let a real attack run longer.
Learn more in the lesson: 47.8 Scenario and HR + Technical Mix