1230—Eastern Standard Time. Location: Chesty Lewis Puller Security Operations Center- Centralia, Virginia.  

"Hey Charles" Justin said, "...look at this"

Charles, the SOC manager, walked over and started looking at the monitors. "Looks like there are a lot of tickets being put in around APAC for an email."

"Yeah, but now look at this" Justin pointed to the security dashboard. "These emails are corresponding with an event that had been reported in our threat intelligence feed."

"Damn. How many tickets have been turned in already?"

"About 50 from various places.  India, Malaysia, Australia, and Japan" Justin stated, "...but we have another issue."

"Ok. How many systems were impacted?" asked Charles

"Right now, it's two. Japan and India. The systems were immediately quarantined and the country IT help desk personnel already pulled them off the network."

"What's the name of the security folks down there so we can get a call together as soon as possible?"

"Tatsuya from Japan and Sandeep from India. They've already been informed to call in at 1300" Justin stated, "I've got the APAC incident response team getting together now and have been briefing them while I contact them."

"Also..." a voice came from across the room "...the CIO and CISO know from the automated email that was sent out." Wendy was on the security awareness team who ensured that people got the information they needed. "I've already talked to Gosia in Poland.  She's all over it for APAC.  She's just standing by for the go-ahead to send an email out to the users. The draft is right here." she hands off a copy to Charles and to Justin.

Got it. Charles takes a few seconds to go of the paper, "Please go ahead and tell her to send it off. I'll brief the bosses so they know what's been done already. If there isn't anything else, I'll see everyone in the call at 1300."

To be continued...