{"id":228095,"date":"2018-01-29T17:19:15","date_gmt":"2018-01-29T16:19:15","guid":{"rendered":"http:\/\/securite.intrinsec.com\/?p=3694"},"modified":"2018-01-29T17:19:15","modified_gmt":"2018-01-29T16:19:15","slug":"avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/","title":{"rendered":"Incident response by Luc, head of CERT-Intrinsec"},"content":{"rendered":"<p style=\"text-align: center;\"><em>Cette interview de Luc Roud\u00e9, le responsable CERT-Intrinsec, a \u00e9t\u00e9 men\u00e9e par GSMag, afin de pr\u00e9senter les missions et les enjeux d&rsquo;un CERT.\u00a0<\/em><\/p>\n<p>&nbsp;<\/p>\n<h4><span style=\"color: #0a3055;\"><strong>GSMag\u00a0: Pouvez-vous nous pr\u00e9senter votre CERT et ses activit\u00e9s ?<\/strong><\/span><\/h4>\n<p><img decoding=\"async\" class=\"wp-image-217906 size-full alignright\" src=\"\/wp-content\/uploads\/2018\/01\/CERT-seal.png\" alt=\"\" width=\"120\" height=\"120\" \/>Luc\u00a0: Les missions principales du CERT d&rsquo;Intrinsec sont d\u2019effectuer des op\u00e9rations de <strong>r\u00e9ponse \u00e0 incident<\/strong> et d\u2019<strong>investigation num\u00e9rique<\/strong>, de maintenir une activit\u00e9 de veille sur les vuln\u00e9rabilit\u00e9s critiques et les \u00e9v\u00e9nements majeurs, et d\u2019accompagner ses clients sur les probl\u00e9matiques d\u2019anticipation, de traitement et de renforcement vis-\u00e0-vis des menaces informatiques.<br \/>\nAu sein d\u2019Intrinsec \u00e0 proprement parler, le CERT \u00e9volue dans une structure <strong><a href=\"https:\/\/www.intrinsec.com\/services-manages-de-securite\/\"><em>Services Manag\u00e9s de S\u00e9curit\u00e9<\/em>,<\/a><\/strong> comprenant un <a href=\"https:\/\/www.intrinsec.com\/soc-securite-operationnelle\/\"><strong>SOC <\/strong><\/a>et une cellule de <a href=\"https:\/\/www.intrinsec.com\/cyber-threat-intelligence\/\"><strong>Cyber Threat Intelligence<\/strong><\/a>. Nous intervenons comme Niveau 3 du SOC et nous apportons notre expertise technique &amp; s\u00e9curit\u00e9 aux analystes de la CTI.<\/p>\n<p>&nbsp;<\/p>\n<h4><span style=\"color: #0a3055;\"><strong>GSMag\u00a0: Comment se d\u00e9roule la r\u00e9ponse \u00e0 incidents\u00a0?<\/strong><\/span><\/h4>\n<p>Nous avons plusieurs approches, la plus simple \u00e9tant une ligne t\u00e9l\u00e9phonique directe vers le <a href=\"https:\/\/www.intrinsec.com\/cert-intrinsec\/\"><strong>CERT<\/strong><\/a> permettant \u00e0 quiconque subissant un incident de s\u00e9curit\u00e9 de nous solliciter. Une fois l\u2019\u00e9v\u00e9nement r\u00e9solu, nous effectuons syst\u00e9matiquement un <em>post-mortem<\/em> et fournissons au client les cl\u00e9s pour d\u00e9jouer les sc\u00e9narios semblables. Dans la mesure du possible, nous pr\u00e9sentons en compl\u00e9ment des suggestions adapt\u00e9es \u00e0 son contexte pour entamer une d\u00e9marche d\u2019am\u00e9lioration continue.<\/p>\n<p>Dans le cas de clients existants, nous allons nous int\u00e9grer dans leur processus de gestion des incidents de s\u00e9curit\u00e9. Cela peut passer par des mesures pr\u00e9liminaires de pr\u00e9paration de l\u2019environnement \u00e0 des op\u00e9rations de r\u00e9ponse \u00e0 incident. Nous sommes \u00e9galement en mesure de nous int\u00e9grer \u00e0 des dispositifs d\u00e9j\u00e0 en place, par exemple en nous positionnant comme point d\u2019escalade d\u2019un <strong>SOC<\/strong> existant ou en mettant en place un flux d\u2019indicateurs techniques consomm\u00e9 par des \u00e9quipements IPS ou IDS exploit\u00e9s par le client.<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li>\n<h4><strong><span style=\"color: #0a3055;\">GS Mag\u00a0: De quelle mani\u00e8re collaborez-vous avec les autres CERT en France, en Europe et au-del\u00e0\u00a0?<\/span><br \/>\n<\/strong><\/h4>\n<\/li>\n<\/ul>\n<p>Nous avons des circuits de communication assez informels avec des <strong>CERT<\/strong> internes comme priv\u00e9s op\u00e9rant sur le territoire fran\u00e7ais. Nous \u00e9changeons aussi au sein de groupes de discussions avec des entit\u00e9s \u00e0 l\u2019international. Il s\u2019agit surtout de partages d\u2019informations sur les nouvelles menaces\u00a0: derniers \u00e9chantillons de<a href=\"https:\/\/fr.wikipedia.org\/wiki\/Logiciel_malveillant\"> malwares<\/a> d\u00e9couverts, indicateurs techniques associ\u00e9s, techniques employ\u00e9es par certains groupes d\u2019attaquants\u2026<\/p>\n<p>En ce qui concerne le partage d\u2019informations avec d\u2019autres CERT priv\u00e9s, nous mettons autant que possible de c\u00f4t\u00e9 le fait que nous soyons concurrents pour nous consacrer sur notre mission commune\u00a0: <strong>mettre le plus de b\u00e2tons possibles dans les roues des cybercriminels<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li>\n<h4><span style=\"color: #0a3055;\"><strong><strong>GS Mag\u00a0: Qu\u2019en est-il des autres acteurs et entit\u00e9s orchestrant la s\u00e9curit\u00e9, tels que les SOC\u00a0?<\/strong><\/strong><\/span><\/h4>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"wp-image-217909 alignleft\" src=\"\/wp-content\/uploads\/2018\/01\/4134875.png\" alt=\"MISP\" width=\"100\" height=\"100\" \/><\/p>\n<p>Au sein d\u2019Intrinsec, le <strong>CERT<\/strong> \u00e9paule le <strong>SOC<\/strong> sur plusieurs aspects. Le plus classique est son positionnement en Niveau 3, pour r\u00e9cup\u00e9rer en escalade les incidents trait\u00e9s par les analystes aux Niveaux 1 et 2. En activit\u00e9 r\u00e9guli\u00e8re, nous d\u00e9versons dans une plateforme de partage d\u2019indicateurs (MISP) tous les artefacts que nous pouvons extraire des malwares analys\u00e9s dans le cadre de nos op\u00e9rations de r\u00e9ponse \u00e0 incident. Le <strong>CERT<\/strong> a \u00e9galement pour vocation de faire le pont entre les attaquants et les d\u00e9fenseurs dans le cadre de missions de<strong> Purple Team<\/strong>\u00a0: l\u2019objectif de ces op\u00e9rations \u00e9tant de tester les d\u00e9fenses vis-\u00e0-vis de sc\u00e9narios d\u2019attaque cr\u00e9dibles, le CERT peut apporter ses retours d\u2019exp\u00e9riences sur les techniques offensives observ\u00e9es \u00ab\u00a0dans la nature\u00a0\u00bb, et fournir son expertise technique en appui du<strong> SOC<\/strong> pour d\u00e9velopper les m\u00e9thodes de d\u00e9tection de ces tactiques. Enfin, le CERT apporte a la <strong>CTI<\/strong> de l&rsquo;expertise technique. Les analystes CTI sont plus form\u00e9s sur les aspects g\u00e9opolitiques ; s&rsquo;ils trouvent des fichiers inconnus associ\u00e9s de pr\u00e8s ou de loin avec l&rsquo;un de nos clients, nous les \u00e9paulons sur l&rsquo;analyse du fichier.<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li>\n<h4><span style=\"color: #0a3055;\"><strong><strong>GS Mag\u00a0: Quelles sont, selon vous, les cl\u00e9s pour une r\u00e9ponse \u00e0 incidents efficiente\u00a0?<\/strong><\/strong><\/span><\/h4>\n<\/li>\n<\/ul>\n<p>On peut g\u00e9n\u00e9ralement diviser une op\u00e9ration de r\u00e9ponse \u00e0 incident en six \u00e9tapes\u00a0: <strong>Pr\u00e9paration, Identification, Confinement, Eradication, Retour au Nominal et Capitalisation<\/strong>. Et on ne le r\u00e9p\u00e8tera jamais assez, la cl\u00e9 est la pr\u00e9paration. D\u2019un point de vue purement organisationnel, en premier lieu, en se posant quelques questions\u00a0: quels sont les profils d\u2019attaquants susceptibles de nous nuire\u00a0? Quels sc\u00e9narios d\u2019attaque pouvons-nous envisager vis-\u00e0-vis de ces profils ? De quelles mesures disposons-nous pour pr\u00e9venir, d\u00e9tecter et r\u00e9agir \u00e0 ces sc\u00e9narios ?<\/p>\n<p>Ensuite, il convient de choisir les moyens \u00e0 mettre en \u0153uvre pour r\u00e9pondre \u00e0 ces questions. Dans ce contexte, je cite r\u00e9guli\u00e8rement le mod\u00e8le pr\u00e9sent\u00e9 dans un article publi\u00e9 par le SANS en 2015, <em>The Sliding Scale of Cyber Security<\/em> [1]. Diff\u00e9rentes cat\u00e9gories de moyens y sont pr\u00e9sent\u00e9es, la plus importante \u00e9tant concentr\u00e9e sur l\u2019architecture du SI. Une r\u00e9ponse \u00e0 incident r\u00e9alis\u00e9e au sein d\u2019une infrastructure ma\u00eetris\u00e9e aura toutes les chances d\u2019\u00eatre rapide et efficace. Un sch\u00e9ma d\u2019architecture \u00e0 jour, une matrice des flux coh\u00e9rente, une classification des actifs m\u00e9tiers critiques\u2026 autant d\u2019informations essentielles pour identifier les points \u00e0 inspecter en priorit\u00e9 et pr\u00e9voir des actions de d\u00e9fense de circonstance.<\/p>\n<p>[1] <a href=\"https:\/\/www.sans.org\/reading-room\/whitepapers\/analyst\/sliding-scale-cyber-security-36240\">https:\/\/www.sans.org\/reading-room\/whitepapers\/analyst\/sliding-scale-cyber-security-36240<\/a><\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li>\n<h4><span style=\"color: #0a3055;\"><strong><strong>GS Mag\u00a0: Quels conseils pouvez-vous donner aux organisations pour renforcer leur niveau de s\u00e9curit\u00e9\u00a0?<\/strong><\/strong><\/span><\/h4>\n<\/li>\n<\/ul>\n<p>Il est primordial d\u2019<strong>impliquer la direction g\u00e9n\u00e9rale<\/strong> et d\u2019<strong>assumer les co\u00fbts engendr\u00e9s<\/strong>. D\u00e9velopper une strat\u00e9gie de s\u00e9curit\u00e9 de l\u2019information coh\u00e9rente n\u00e9cessite d\u2019engager des projets aupr\u00e8s de populations diverses et de porter des actions qui ne pr\u00e9sentent \u00e0 premi\u00e8re vue pas d\u2019int\u00e9r\u00eat imm\u00e9diat pour le m\u00e9tier, voire introduisent des contraintes de fonctionnement. Dans ce contexte, avoir l\u2019appui de la hi\u00e9rarchie permet de porter un message fort sur la prise en compte des enjeux li\u00e9s \u00e0 la s\u00e9curit\u00e9 de l\u2019information, et d\u2019assurer l\u2019allocation des moyens n\u00e9cessaires \u00e0 bonne conduite d\u2019une mission d\u2019am\u00e9lioration continue.<\/p>\n<p>&nbsp;<\/p>\n<p><em>Vous pourrez retrouver la suite de l\u2019interview dans le N\u00b041 du magazine <a href=\"https:\/\/www.globalsecuritymag.fr\/\">Global Security Mag<\/a>.<\/em><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cette interview de Luc Roud\u00e9, le responsable CERT-Intrinsec, a \u00e9t\u00e9 men\u00e9e par GSMag, afin de [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[60,160,162,161,61],"class_list":["post-228095","post","type-post","status-publish","format-standard","hentry","category-cert","tag-cert-en","tag-cyber-threat-intelligence","tag-itw-luc-cert","tag-reponse-a-incidents","tag-soc-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>La r\u00e9ponse \u00e0 incidents de s\u00e9curit\u00e9 - CERT - Intrinsec<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intrinsec.com\/en\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"La r\u00e9ponse \u00e0 incident par Luc, responsable du CERT-Intrinsec\" \/>\n<meta property=\"og:description\" content=\"Cette interview de Luc Roud\u00e9, le responsable CERT-Intrinsec, a \u00e9t\u00e9 men\u00e9e par GSMag, afin de [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intrinsec.com\/en\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/\" \/>\n<meta property=\"og:site_name\" content=\"INTRINSEC\" \/>\n<meta property=\"article:published_time\" content=\"2018-01-29T16:19:15+00:00\" \/>\n<meta name=\"author\" content=\"Intrinsec\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:site\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Intrinsec\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\\\/\"},\"author\":{\"name\":\"Intrinsec\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/ade590fbc7ad6f413727bae7cd3fb799\"},\"headline\":\"La r\u00e9ponse \u00e0 incident par Luc, responsable du CERT-Intrinsec\",\"datePublished\":\"2018-01-29T16:19:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\\\/\"},\"wordCount\":1100,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"keywords\":[\"CERT\",\"Cyber Threat Intelligence\",\"Itw Luc CERT\",\"r\u00e9ponse \u00e0 incidents\",\"SOC\"],\"articleSection\":[\"CERT\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\\\/\",\"name\":\"La r\u00e9ponse \u00e0 incidents de s\u00e9curit\u00e9 - CERT - Intrinsec\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\"},\"datePublished\":\"2018-01-29T16:19:15+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.intrinsec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"La r\u00e9ponse \u00e0 incident par Luc, responsable du CERT-Intrinsec\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"name\":\"INTRINSEC\",\"description\":\"Notre m\u00e9tier , Prot\u00e9ger le v\u00f4tre\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intrinsec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\",\"name\":\"INTRINSEC\",\"alternateName\":\"ISEC\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"width\":1322,\"height\":1322,\"caption\":\"INTRINSEC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Intrinsec\",\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/intrinsec\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC0trUZAHNZOUbxYnNdecM4A\"],\"description\":\"soci\u00e9t\u00e9 de consulting, pure player cybers\u00e9curit\u00e9 fran\u00e7ais et europ\u00e9en depuis plus de 30ans, sp\u00e9cialiste dans la s\u00e9curit\u00e9 offensive & audit (pentest\\\/red team), GRC, et services IMSS comme le SOC, CTI et CERT Intrinsec est qualifi\u00e9 PASSI Elev\u00e9, PRIS Elev\u00e9 et PACS par l'ANSSI\",\"email\":\"contact@intrinsec.com\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/ade590fbc7ad6f413727bae7cd3fb799\",\"name\":\"Intrinsec\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g\",\"caption\":\"Intrinsec\"},\"sameAs\":[\"https:\\\/\\\/www.intrinsec.com\"],\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/en\\\/author\\\/ufhtbqccsz\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Security Incident Response - CERT - Intrinsec","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intrinsec.com\/en\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/","og_locale":"en_US","og_type":"article","og_title":"La r\u00e9ponse \u00e0 incident par Luc, responsable du CERT-Intrinsec","og_description":"Cette interview de Luc Roud\u00e9, le responsable CERT-Intrinsec, a \u00e9t\u00e9 men\u00e9e par GSMag, afin de [&hellip;]","og_url":"https:\/\/www.intrinsec.com\/en\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/","og_site_name":"INTRINSEC","article_published_time":"2018-01-29T16:19:15+00:00","author":"Intrinsec","twitter_card":"summary_large_image","twitter_creator":"@Intrinsec","twitter_site":"@Intrinsec","twitter_misc":{"Written by":"Intrinsec","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intrinsec.com\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/#article","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/"},"author":{"name":"Intrinsec","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/ade590fbc7ad6f413727bae7cd3fb799"},"headline":"La r\u00e9ponse \u00e0 incident par Luc, responsable du CERT-Intrinsec","datePublished":"2018-01-29T16:19:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intrinsec.com\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/"},"wordCount":1100,"commentCount":0,"publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"keywords":["CERT","Cyber Threat Intelligence","Itw Luc CERT","r\u00e9ponse \u00e0 incidents","SOC"],"articleSection":["CERT"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intrinsec.com\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.intrinsec.com\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/","url":"https:\/\/www.intrinsec.com\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/","name":"Security Incident Response - CERT - Intrinsec","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/#website"},"datePublished":"2018-01-29T16:19:15+00:00","breadcrumb":{"@id":"https:\/\/www.intrinsec.com\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intrinsec.com\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.intrinsec.com\/avis-dexpert-la-reponse-a-incidents-par-luc-notre-responsable-cert\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.intrinsec.com\/"},{"@type":"ListItem","position":2,"name":"La r\u00e9ponse \u00e0 incident par Luc, responsable du CERT-Intrinsec"}]},{"@type":"WebSite","@id":"https:\/\/www.intrinsec.com\/#website","url":"https:\/\/www.intrinsec.com\/","name":"INTRINSEC","description":"Our job is to protect yours.","publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intrinsec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intrinsec.com\/#organization","name":"INTRINSEC","alternateName":"ISEC","url":"https:\/\/www.intrinsec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","width":1322,"height":1322,"caption":"INTRINSEC"},"image":{"@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Intrinsec","https:\/\/fr.linkedin.com\/company\/intrinsec","https:\/\/www.youtube.com\/channel\/UC0trUZAHNZOUbxYnNdecM4A"],"description":"Intrinsec, a consulting firm and pure-play French and European cybersecurity provider for over 30 years, specializes in offensive security and auditing (penetration testing\/red teams), GRC, and IMSS services such as SOC, CTI, and CERT. Intrinsec is qualified at PASSI High, PRIS High, and PACS levels by ANSSI.","email":"contact@intrinsec.com"},{"@type":"Person","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/ade590fbc7ad6f413727bae7cd3fb799","name":"Intrinsic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g","caption":"Intrinsec"},"sameAs":["https:\/\/www.intrinsec.com"],"url":"https:\/\/www.intrinsec.com\/en\/author\/ufhtbqccsz\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/228095","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/comments?post=228095"}],"version-history":[{"count":0,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/228095\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media?parent=228095"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/categories?post=228095"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/tags?post=228095"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}