2020-002-Liz Fong-Jones discusses blog post about Honeycomb.io Incident Response

<p><strong>Ms. Berlin's appearance on #misec podcast -</strong> <a href= "https://www.youtube.com/watch?v=Cj2IF0zn_BE"><strong>https://www.youtube.com/watch?v=Cj2IF0zn_BE</strong></a> <strong>with @kentgruber and @quantissIA</strong></p> <p><strong>Blog post: </strong></p> <p><a href= "https://www.honeycomb.io/blog/incident-report-running-dry-on-memory-without-noticing/"> <span style= "font-weight: 400;">https://www.honeycomb.io/blog/incident-report-running-dry-on-memory-without-noticing/</span></a></p> <p> </p> <p><strong>What is Honeycomb.io?</strong></p> <p><span style="font-weight: 400;">From the site: </span></p> <p><span style="font-weight: 400;">“Honeycomb is a tool for introspecting and interrogating your production systems. We can gather data from any source—from your clients (mobile, IoT, browsers), vendored software, or your own code. Single-node debugging tools miss crucial details in a world where infrastructure is dynamic and ephemeral. Honeycomb is a new type of tool, designed and evolved to meet the real needs of platforms,</span> <a href= "https://www.honeycomb.io/microservices"><span style= "font-weight: 400;">microservices</span></a><span style= "font-weight: 400;">,</span> <a href= "https://www.honeycomb.io/serverless"><span style= "font-weight: 400;">serverless apps</span></a><span style= "font-weight: 400;">, and complex systems.”</span></p> <p> </p> <p><strong>What are SLOs and how do you establish them? Are they anything like SLA (Service level agreements)?</strong></p> <p><span style="font-weight: 400;"> </span></p> <p><strong>Can you give us an idea of timeline? Length of time from issue to IR to resolution? </strong></p> <p><span style="font-weight: 400;"><br /> <br /></span></p> <p><strong>Are the dashboards mentioned in the blogs post your operations dashboard?</strong></p> <p><span style="font-weight: 400;">[nope! hashtag no-dashboards]</span></p> <p><span style="font-weight: 400;"> </span></p> <p><strong>Leading and lagging indicators ( IT and infosec call them detection and mitigat