After the Alert: A Mr. Robot Exercise in Incident Decisions
An alert says a privileged support account exported data. The access may be legitimate, or it may be the beginning of a serious incident. The service behind that account handles customer requests, so
