CrowdStrike Interview Question

Q: how to identify incident response