In this conversation, John Tolbert  interviews Josh Gorrell from Tanium about incident response. They discuss common threats that require incident response, such as ransomware, data breaches, and DDoS attacks. They also touch on the importance of incident response in meeting regulatory compliance requirements and how it can be a competitive advantage for organizations. The conversation covers the key players in an incident response team, best practices for incident response, and metrics for measuring success. They also discuss trends in incident response, including automation and AI.